7.5

CVE-2025-2813

An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http service on port 80.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorPhoenix Contact
Product AXL F BK PN TPS
Default Statusunaffected
Version <= 1.33
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK PN TPS XC
Default Statusunaffected
Version <= 1.33
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK PN (discontinued)
Default Statusunaffected
Version <= 1.06
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK PN XC (discontinued)
Default Statusunaffected
Version <= 1.06
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK SAS (discontinued)
Default Statusunaffected
Version <= 1.35
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK ETH
Default Statusunaffected
Version <= 1.31
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK ETH XC
Default Statusunaffected
Version <= 1.31
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK EIP
Default Statusunaffected
Version <= 1.30
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK EIP EF
Default Statusunaffected
Version <= 1.30
Version 0.0
Status affected
VendorPhoenix Contact
Product AXL F BK EIP XC
Default Statusunaffected
Version <= 1.30
Version 0.0
Status affected
VendorPhoenix Contact
Product IL PN BK-PAC
Default Statusunaffected
Version <= 1.13
Version 0.0
Status affected
VendorPhoenix Contact
Product IL ETH BK-PAC
Default Statusunaffected
Version <= 1.00
Version 0.0
Status affected
VendorPhoenix Contact
Product IL ETH BK DI8 DO4 2TX-PAC
Default Statusunaffected
Version <= 1.42
Version 0.0
Status affected
VendorPhoenix Contact
Product IL EIP BK DI8 DO4 2TX-PAC
Default Statusunaffected
Version <= 1.12
Version 0.0
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.314
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
info@cert.vde.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.