130 matches found
CVE-2025-41450
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...
CVE-2025-41450
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...
CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...
CVE-2025-41450
Summary (CVE-2025-41450): Improper authentication in Danfoss AK-SM 8xxA Series (pre-4.2). Multiple sources confirm an authentication bypass that could enable remote access and potentially arbitrary action; CISA notes remote code execution risk. The issue affects AK-SM 8xxA Series prior to version...
CVE-2025-41450 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2...
PT-2025-20370 · Danfoss · Danfoss Ak-Sm 8Xxa Series
Name of the Vulnerable Software and Affected Versions: Danfoss AK-SM 8xxA Series versions prior to 4.2 Description: The issue is related to an improper authentication vulnerability in the Danfoss AKSM8xxA Series. This vulnerability affects the Danfoss AK-SM 8xxA Series prior to version 4.2...
Danfoss AK-SM 8xxA Series 安全漏洞
Danfoss AK-SM 8xxA Series is a series of industrial-grade intelligent pressure sensors from Danfoss, Denmark, designed for refrigeration and air conditioning systems and supporting Modbus communication. A security vulnerability exists in Danfoss AK-SM 8xxA Series versions prior to 4.2, which stem...
Danfoss AK-SM800A Improper Authentication (CVE-2023-25913)
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information. This plugin only works with Tenable.ot. Please visit...
Danfoss AK-SM800A Improper Input Validation (CVE-2023-25915)
Due to improper input validation, a remote attacker could execute arbitrary commands on the target system. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Danfoss AK-SM800A Path Traversal (CVE-2023-25914)
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2023-25913 Authentication Bypass in Danfoss AK-SM800A
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...
CVE-2023-25914 Authneticated Path Traversal in Danfoss AK-SM800A
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...
CVE-2023-25914 Authneticated Path Traversal in Danfoss AK-SM800A
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise...
CVE-2023-25913 Authentication Bypass in Danfoss AK-SM800A
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information...
CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...
CVE-2023-25915 Authenticated Remote Command Execution in Danfoss AK-SM800A
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system...
Danfoss AK-SM800A 授权问题漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A security vulnerability exists in Danfoss AK-SM800A version 3.3 and earlier, which stems from an authentication flaw that can be exploited by an attacker to generate web reports that disclo...
Danfoss AK-SM800A 安全漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A security vulnerability exists in Danfoss AK-SM800A 3.3 and earlier versions that originates from improper input validation and can be exploited by an attacker to execute arbitrary commands...
Danfoss AK-SM800A 路径遍历漏洞
Danfoss AK-SM800A is a system manager from Danfoss, Denmark. Provides secure system control and monitoring A path traversal vulnerability exists in Danfoss AK-SM800A 3.3 and earlier versions, which stems from an improper restriction, and can be exploited by an attacker to retrieve and read system...
