Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 00:32.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2025-072

Phoenix Contact: Security Advisory for QUINT4-UPS EIP

Phoenix Contact — QUINT4

Phoenix Contact PSIRThoog

Gepubliceerd

14 oktober 2025

Laatste update

14 oktober 2025

Getroffen sectoren

Risk evaluation

Multiple vulnerabilities were discovered in the firmware of QUINT4-UPS EIP devices that can be used by an unauthenticated remote attacker to perform Denial of Service attacks and to gather login credentials for the Webfrontend.

Mitigatiesamenvatting

This product was designed for use in closed industrial networks. Phoenix Contact strongly recommends operating network-capable devices in closed networks or protected with a suitable firewall. For detailed information on our recommendations for measures to protect network-capable devices, please refer to our [application note](https://dam-mdc.phoenixcontact.com/asset/156443151564/0a870ae433c19148b80bd760f3a1c1f2/107913_en_03.pdf). In the industrial sector it is common practice to use Modbus/TCP without authentication.

Revisiegeschiedenis (1)
  1. Initiële publicatie — 14 oktober 2025

    Initial revision.

Officiële bron: Phoenix Contact PSIRT