CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-22582

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...

CVE-2023-22583

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...

CVE-2023-22584

The Danfoss AK-EM100 stores login credentials in cleartext...

CVE-2023-25912

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values...

CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-25911

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...

CVE-2023-22586

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...

Cross site scripting

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

Remote file inclusion

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...

Command injection

The Danfoss AK-EM100 web applications allow for OS command injection through the web application parameters...

Sql injection

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...

CVE-2023-25911 Authenticated OS Command Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...

CVE-2023-22582 Reflected Cross-Site Scripting in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...

CVE-2023-25911 Authenticated OS Command Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...

CVE-2023-25911

CVE-2023-25911 describes an authenticated OS command injection in Danfoss AK-EM100 web applications, exploitable via web-application parameters. Multiple connected sources confirm the issue and the impact (high/critical) with network access and low attack complexity, requiring low privileges and ...

CVE-2023-22583 SQL Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...

CVE-2023-22583 SQL Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...

CVE-2023-22582 Reflected Cross-Site Scripting in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting...

CVE-2023-22582

CVE-2023-22582 concerns the Danfoss AK-EM100 web applications and describes a Reflected Cross-Site Scripting (XSS) vulnerability. The CVE entry indicates a network-accessible issue with low to high-severity interpretations across sources, with CVSSv3.1 metrics showing base scores of 6.1 (MEDIUM) ...