12 matches found
Danfoss AK-SM800A Improper Authentication (CVE-2025-41450)
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...
Danfoss AK-SM800A Path Traversal (CVE-2023-25914)
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
Danfoss AK-SM800A Improper Input Validation (CVE-2023-25915)
Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Danfoss AK-SM800A Improper Authentication (CVE-2023-25913)
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...
CVE-2023-25914 Authneticated Path Traversal in Danfoss AK-SM800A
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...
CVE-2023-25913 Authentication Bypass in Danfoss AK-SM800A
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...
CVE-2023-25914 Authneticated Path Traversal in Danfoss AK-SM800A
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...
CVE-2023-25913 Authentication Bypass in Danfoss AK-SM800A
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...
CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...
CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...
Danfoss AK-SM800A 授权问题漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A security vulnerability exists in Danfoss AK-SM800A version 3.3 and earlier, which stems from an authentication flaw that can be exploited by an attacker to generate web reports that disclo...
Danfoss AK-SM800A 路径遍历漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A path traversal vulnerability exists in Danfoss AK-SM800A 3.3 and earlier versions, which stems from an improper restriction, and can be exploited by an attacker to retrieve and read system...