The webserver is vulnerable to a denial of service condition. An unauthenticated remote attacker can craft a special GET request with an over-long content-length to trigger the issue without affecting the core functionality.
https://www.securityweek.com/vulnerabilities-allow-disruption-of-phoenix-contact-ups-devices/