130 matches found
Danfoss AK-EM100 web applications SQL注入漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms, and reports on all of their refrigeration equipment. A security...
PT-2023-20356 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue allows an authenticated user to perform OS command injection through web application parameters. This can potentially lead to unauthorized access and control of the syste...
PT-2023-18569 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns the storage of login credentials in cleartext. This means that the credentials are not encrypted, potentially allowing unauthorized access. No information is...
Danfoss AK-EM100 web applications 跨站脚本漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides the store's web-based graphical user interface, which allows a range of everyday users to locally or remotely monitor data, alarms, and reports on all of their refrigeration equipment. A security vulnerabili...
PT-2023-20357 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address,...
Danfoss AK-EM100 web applications 安全漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms and reports on all their refrigeration equipment. A security vulnerability...
PT-2023-18567 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns Reflected Cross-Site Scripting in the web applications of Danfoss AK-EM100. This allows for malicious scripts to be reflected off a vulnerable web application to...
Danfoss AK-EM100 web applications 跨站脚本漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms and reports on all their refrigeration equipment. A security vulnerability...
PT-2023-18570 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns Reflected Cross-Site Scripting in the title parameter of the web application. This allows for potential malicious script injection. Recommendations: At the momen...
Danfoss AK-EM100 web applications 信息泄露漏洞
Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms, and reports on all of their refrigeration equipment. An information...
PT-2023-18568 · Danfoss · Danfoss Ak-Em100
Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns SQL injection in the login forms of the web interface. This allows for potential unauthorized access or manipulation of data. No information is provided about th...
The vulnerability of the web interface of the server application for managing food industry businesses AK-EM 800 lies in the use of rigidly encrypted user accounts (users “admin”, “administrator”, “user”, and “guest”). This allows a perpetrator to increase their privileges.
The vulnerability of the web interface of the industrial management application AK-EM 800 relates to the use of rigidly encrypted user credentials users “admin”, “administrator”, “user”, and “guest”, with the default password being “danfoss”. Exploiting this vulnerability could allow an attacker ...
Critical Bugs Open Food-Safety Systems to Remote Attacks
Two critical vulnerabilities in a food-quality management software package would allow adversaries to completely compromise the system. The issues affect the AK-EM 800 product from SCADA vendor Danfoss. It’s an enterprise management solution for the food retail industry that provides a central...
Danfoss Link™ - Certificates or keys found, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Danfoss Link™ published at the 'play' market has multiple vulnerabilities...
IBC Solar ServeMaster Cross-Site Scripting Vulnerability
ServeMaster TLP+ and Danfoss TLX Pro+ are web-based SCADA systems. A cross-site scripting vulnerability exists in ServeMaster TLP+ and Danfoss TLX Pro+. An attacker could exploit this vulnerability to perform XSS attacks...
IBC Solar ServeMaster Plain Text Password Vulnerability
ServeMaster TLP+ and Danfoss TLX Pro+ are web-based SCADA systems. A plain text password vulnerability exists in ServeMaster TLP+ and Danfoss TLX Pro+. An attacker can exploit this vulnerability to obtain a plain text password by viewing the web page source code...
IBC Solar ServeMaster Source Code Vulnerability
ServeMaster TLP+ and Danfoss TLX Pro+ are web-based SCADA systems. A source code vulnerability exists in IBC Solar ServeMaster. An attacker could exploit this vulnerability to obtain source code for executable scripts...
CVE-2015-6475
Multiple cross-site scripting XSS vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...