CVE-2025-41704CWE-770denial-of-service

CVE-2025-41704

Medium · published October 14, 2025

CVSS v3.1

5.3

EPSS

Percentile

75.5

In the wild

Unconfirmed

What it is

An unauthanticated remote attacker can perform a DoS of the Modbus service by sending a specific function and sub-function code without affecting the core functionality.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0: Not supplied
EPSS: 0.01594 · 75.5th percentile
Weakness: CWE-770 · Allocation of Resources Without Limits or Throttling
Published: 2025-10-14T12:15Z

References (2)

https://certvde.com/de/advisories/VDE-2025-072 · [email protected]http://seclists.org/fulldisclosure/2025/Oct/12 · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

14 OCT 08:05Z
Phoenix Contact: Unauthenticated Modbus Service DoS via Crafted Function Code
cvelistv5