CVE-2023-22583 SQL Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms...

CVE-2023-25911

CVE-2023-25911 describes an authenticated OS command injection in Danfoss AK-EM100 web applications, exploitable via web-application parameters. Multiple connected sources confirm the issue and the impact (high/critical) with network access and low attack complexity, requiring low privileges and ...

CVE-2023-22583

CVE-2023-22583 affects the Danfoss AK-EM100 web-forms login functionality. The issue is an SQL injection vulnerability in the login forms, enabling potential unauthorized data access or manipulation. The core details across connected documents confirm the affected software (Danfoss AK-EM100 web i...

CVE-2023-22586 Local File Inclusion in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...

CVE-2023-22584

Summary: CVE-2023-22584 concerns the Danfoss AK-EM100, where login credentials are stored in cleartext. Affected component: Danfoss AK-EM100 web interface (device storage of credentials). Root cause / impact: Credentials are stored in cleartext, exposing confidentiality; no integrity or availabil...

CVE-2023-22585 Reflected Cross-Site Scripting in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-22586

CVE-2023-22586 concerns the Danfoss AK-EM100 web applications, where a vulnerability in the web app’s file parameter allows Local File Inclusion. The description is consistently reported across NVD/Red Hat/CVE lists as a Local File Inclusion issue affecting Danfoss AK-EM100. The connected sources...

CVE-2023-22586 Local File Inclusion in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter...

CVE-2023-22584 Cleartext credentials in Danfoss AK-EM100

The Danfoss AK-EM100 stores login credentials in cleartext...

CVE-2023-22584 Cleartext credentials in Danfoss AK-EM100

The Danfoss AK-EM100 stores login credentials in cleartext...

CVE-2023-22585 Reflected Cross-Site Scripting in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter...

CVE-2023-25912

The CVE concerns Danfoss AK-EM100, specifically its webreport generation feature, which allows an unauthorized actor to generate a web report that discloses sensitive internal data (internal IP address, usernames, and internal device values). The available documents do not specify the underlying ...

CVE-2023-25912 Webreport disclosure to unauthorized actor in Danfoss AK-EM100

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values...

CVE-2023-22585

The CVE-2023-22585 entry concerns the Danfoss AK-EM100 web applications, where the vulnerable component is the web application itself and the root cause is a Reflected Cross-Site Scripting vulnerability in the title parameter. This allows injection of malicious scripts when user-supplied input is...

CVE-2023-25912 Webreport disclosure to unauthorized actor in Danfoss AK-EM100

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values...

ak-t.co.jp Cross Site Scripting vulnerability OBB-3412312

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-18567 · Danfoss · Danfoss Ak-Em100

Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns Reflected Cross-Site Scripting in the web applications of Danfoss AK-EM100. This allows for malicious scripts to be reflected off a vulnerable web application to...

Danfoss AK-EM100 web applications 安全漏洞

Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms and reports on all their refrigeration equipment. A security vulnerability...

PT-2023-18569 · Danfoss · Danfoss Ak-Em100

Name of the Vulnerable Software and Affected Versions: Danfoss AK-EM100 affected versions not specified Description: The issue concerns the storage of login credentials in cleartext. This means that the credentials are not encrypted, potentially allowing unauthorized access. No information is...

Danfoss AK-EM100 web applications 命令注入漏洞

Danfoss AK-EM100 web applications is a web application from Danfoss, Denmark. It provides a web-based graphical user interface to the store that allows a range of everyday users to locally or remotely monitor data, alarms, and reports on all of their refrigeration equipment. A command injection...