Search

Find a vulnerability

Search criteria

    9 vulnerabilities by danfoss

    CERTFR-2026-ALE-012

    Vulnerability from certfr_alerte - Published: 2026-10-12 - Updated: 2026-10-12

    Le CERT-FR a connaissance de nombreuses compromissions de Danfoss série AK-SM et AK-SC.

    L'exposition d'une interface de gestion sur Internet est contraire aux bonnes pratiques. Dans le cas où l’administration à distance est impérative, une première mesure temporaire peut consister à restreindre l'accès à des adresses ip de confiance. Il est cependant conseillé de suivre les durcissements et recommandations du CERT-FR [1].

    Solutions

    Déconnecter ou filtrer les accès aux instances AK-SM et AK-SC.

    Remédiation

    En cas de suspicion de compromission : 1. filtrer les accès réseaux uniquement aux prestataires aux instances AK-SM et AK-SC ; 2. réaliser une remise en état d'usine (Factory Reset) ; 3. appliquer tous les correctifs de sécurité disponible ; 4. réaliser une rotation des secrets ; 5. vérifier les comptes existants ; 6. reconfigurer globalement l'équipement.

    Impacted products
    Vendor Product Description
    Danfoss série AK-SC série AK-SC
    Danfoss série AK-SM série AK-SM
    References

    Show details on source website
    To clipboard 

    {
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "s\u00e9rie AK-SC",
      "product": {
        "name": "s\u00e9rie AK-SC",
        "vendor": {
          "name": "Danfoss",
          "scada": true
        }
      }
    },
    {
      "description": "s\u00e9rie AK-SM",
      "product": {
        "name": "s\u00e9rie AK-SM",
        "vendor": {
          "name": "Danfoss",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": "",
  "closed_at": null,
  "content": "## Solutions\n\nD\u00e9connecter ou filtrer les acc\u00e8s aux instances AK-SM et AK-SC.\n\n## Rem\u00e9diation\n\nEn cas de suspicion de compromission :\n1. filtrer les acc\u00e8s r\u00e9seaux uniquement aux prestataires aux instances AK-SM et AK-SC ;\n2. r\u00e9aliser une remise en \u00e9tat d\u0027usine (*Factory Reset*) ;\n3. appliquer tous les correctifs de s\u00e9curit\u00e9 disponible ;\n4. r\u00e9aliser une rotation des secrets ;\n5. v\u00e9rifier les comptes existants ;\n6. reconfigurer globalement l\u0027\u00e9quipement.\n\n",
  "cves": [],
  "initial_release_date": "2026-10-12T00:00:00",
  "last_revision_date": "2026-10-12T00:00:00",
  "links": [
    {
      "title": "[1] Recommandations \u00e0 destination des acteurs du secteur de l\u2019\u00e9nergie et de l\u2019eau",
      "url": "https://www.cert.ssi.gouv.fr/dur/CERTFR-2025-DUR-003/"
    }
  ],
  "reference": "CERTFR-2026-ALE-012",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "Le CERT-FR a connaissance de nombreuses compromissions de Danfoss s\u00e9rie AK-SM et AK-SC.\n\nL\u0027exposition d\u0027une interface de gestion sur Internet est contraire aux bonnes pratiques. Dans le cas o\u00f9 l\u2019administration \u00e0 distance est imp\u00e9rative, une premi\u00e8re mesure temporaire peut consister \u00e0 restreindre l\u0027acc\u00e8s \u00e0 des adresses ip de confiance. Il est cependant conseill\u00e9 de suivre les durcissements et recommandations du CERT-FR [1].",
  "title": "Incident de s\u00e9curit\u00e9 ciblant les Danfoss s\u00e9rie AK-SM et AK-SC",
  "vendor_advisories": []
}

    CVE-2026-15203 (GCVE-0-2026-15203)

    Vulnerability from nvd – Published: 2026-08-26 05:36 – Updated: 2026-08-26 14:58
    VLAI
    Title
    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
    Summary
    Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
    Severity
    9.3 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-26 14:55 UTC
    CWE
    • CWE-1191 - On-Chip debug and test interface with improper access control
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss iC7-Automation SP Affected: 0 , ≤ 2025.3.3 (custom)
    		Create a notification for this product.
    Danfoss iC7-Marine Affected: 0 , ≤ 2025.8.19 (custom)
    		Create a notification for this product.
    Danfoss iC7-Hybrid Affected: 0 , ≤ 2025.10.300845 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15203",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T14:55:58.163499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-26T14:58:01.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Automation SP",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Marine",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.8.19",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Hybrid",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.10.300845",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003eImproper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1191",
              "description": "CWE-1191 On-Chip debug and test interface with improper access control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T05:36:02.006Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cul\u003e\u003cli\u003eiC7-Automation SP:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\" title=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\"\u003ehttps://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.2.5-26A)\u003c/li\u003e\u003cli\u003eiC7-Marine:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\" title=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\"\u003ehttps://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.6.30-GR4.4)\u003c/li\u003e\u003cli\u003eiC7-Hybrid:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\" title=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\"\u003ehttps://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.7.2-GR4.5)\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "*  iC7-Automation SP:\u00a0 https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip \u00a0(Release\u00a02026.2.5-26A)\n  *  iC7-Marine:\u00a0 https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip \u00a0(Release\u00a02026.6.30-GR4.4)\n  *  iC7-Hybrid:\u00a0 https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip \u00a0(Release\u00a02026.7.2-GR4.5)"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2026-15203",
    "datePublished": "2026-08-26T05:36:02.006Z",
    "dateReserved": "2026-07-09T06:41:49.174Z",
    "dateUpdated": "2026-08-26T14:58:01.137Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-41452 (GCVE-0-2025-41452)

    Vulnerability from nvd – Published: 2025-08-22 02:40 – Updated: 2025-08-22 10:52
    VLAI
    Title
    Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
    Summary
    Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions
    Severity
    6.8 (Medium)
    CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-22 10:52 UTC
    CWE
    • CWE-15 - External Control of System or Configuration Setting
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM8xxA Series Affected: 0 , < 4.3.1 (cpe)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41452",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-22T10:52:01.090719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-22T10:52:36.122Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "cpe"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which\u0026nbsp;could allow for a denial of service attack induced by improper handling of exceptional conditions"
            }
          ],
          "value": "Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which\u00a0could allow for a denial of service attack induced by improper handling of exceptional conditions"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-15",
              "description": "CWE-15: External Control of System or Configuration Setting",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-22T02:40:53.563Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Post auth nginx configuration injection in Danfoss AK-SM8xxA Series",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41452",
    "datePublished": "2025-08-22T02:40:53.563Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-22T10:52:36.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2025-41451 (GCVE-0-2025-41451)

    Vulnerability from nvd – Published: 2025-08-22 02:40 – Updated: 2025-08-22 11:25
    VLAI
    Title
    Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
    Summary
    Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-22 10:59 UTC
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM8xxA Series Affected: 0 , < 4.3.1 (cpe)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-22T10:59:49.161150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-22T11:25:28.640Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "cpe"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (\u0027Command Injection\u0027) in Danfoss AK-SM8xxA Series\u0026nbsp;prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system."
            }
          ],
          "value": "Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (\u0027Command Injection\u0027) in Danfoss AK-SM8xxA Series\u00a0prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-22T02:40:46.216Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41451",
    "datePublished": "2025-08-22T02:40:46.216Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-22T11:25:28.640Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2025-41450 (GCVE-0-2025-41450)

    Vulnerability from nvd – Published: 2025-05-08 09:41 – Updated: 2025-08-27 07:14
    VLAI
    Title
    Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
    Summary
    Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
    Severity
    8.2 (High)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-05-08 13:51 UTC
    CWE
    • CWE-305 - Authentication Bypass by Primary Weakness
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM 8xxA Series Affected: 0 , < 4.2 (custom)
    		Create a notification for this product.
    Date Public
    2025-05-08 09:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41450",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:51:39.737731Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:52:31.326Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM 8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2025-05-08T09:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Authentication vulnerability in Danfoss AKSM8xxA Series.\u003cp\u003eThis issue affects Danfoss AK-SM 8xxA Series prior to version 4.2\u003c/p\u003e"
            }
          ],
          "value": "Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-305",
              "description": "CWE-305: Authentication Bypass by Primary Weakness",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-27T07:14:14.846Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41450",
    "datePublished": "2025-05-08T09:41:20.881Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-27T07:14:14.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2026-15203 (GCVE-0-2026-15203)

    Vulnerability from cvelistv5 – Published: 2026-08-26 05:36 – Updated: 2026-08-26 14:58
    VLAI
    Title
    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
    Summary
    Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
    Severity
    9.3 (Critical)
    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
    SSVC
    Exploitation: none Automatable: yes Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-26 14:55 UTC
    CWE
    • CWE-1191 - On-Chip debug and test interface with improper access control
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss iC7-Automation SP Affected: 0 , ≤ 2025.3.3 (custom)
    		Create a notification for this product.
    Danfoss iC7-Marine Affected: 0 , ≤ 2025.8.19 (custom)
    		Create a notification for this product.
    Danfoss iC7-Hybrid Affected: 0 , ≤ 2025.10.300845 (custom)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-15203",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-26T14:55:58.163499Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-26T14:58:01.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Automation SP",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.3.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Marine",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.8.19",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "iC7-Hybrid",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThanOrEqual": "2025.10.300845",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003eImproper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1191",
              "description": "CWE-1191 On-Chip debug and test interface with improper access control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-26T05:36:02.006Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cul\u003e\u003cli\u003eiC7-Automation SP:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\" title=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\"\u003ehttps://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.2.5-26A)\u003c/li\u003e\u003cli\u003eiC7-Marine:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\" title=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\"\u003ehttps://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.6.30-GR4.4)\u003c/li\u003e\u003cli\u003eiC7-Hybrid:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\" title=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\"\u003ehttps://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.7.2-GR4.5)\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "*  iC7-Automation SP:\u00a0 https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip \u00a0(Release\u00a02026.2.5-26A)\n  *  iC7-Marine:\u00a0 https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip \u00a0(Release\u00a02026.6.30-GR4.4)\n  *  iC7-Hybrid:\u00a0 https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip \u00a0(Release\u00a02026.7.2-GR4.5)"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2026-15203",
    "datePublished": "2026-08-26T05:36:02.006Z",
    "dateReserved": "2026-07-09T06:41:49.174Z",
    "dateUpdated": "2026-08-26T14:58:01.137Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-41452 (GCVE-0-2025-41452)

    Vulnerability from cvelistv5 – Published: 2025-08-22 02:40 – Updated: 2025-08-22 10:52
    VLAI
    Title
    Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
    Summary
    Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions
    Severity
    6.8 (Medium)
    CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-22 10:52 UTC
    CWE
    • CWE-15 - External Control of System or Configuration Setting
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM8xxA Series Affected: 0 , < 4.3.1 (cpe)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41452",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-22T10:52:01.090719Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-22T10:52:36.122Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "cpe"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which\u0026nbsp;could allow for a denial of service attack induced by improper handling of exceptional conditions"
            }
          ],
          "value": "Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which\u00a0could allow for a denial of service attack induced by improper handling of exceptional conditions"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-15",
              "description": "CWE-15: External Control of System or Configuration Setting",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-22T02:40:53.563Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Post auth nginx configuration injection in Danfoss AK-SM8xxA Series",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41452",
    "datePublished": "2025-08-22T02:40:53.563Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-22T10:52:36.122Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2025-41451 (GCVE-0-2025-41451)

    Vulnerability from cvelistv5 – Published: 2025-08-22 02:40 – Updated: 2025-08-22 11:25
    VLAI
    Title
    Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
    Summary
    Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
    Severity
    8.7 (High)
    CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-22 10:59 UTC
    CWE
    • CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM8xxA Series Affected: 0 , < 4.3.1 (cpe)
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41451",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-22T10:59:49.161150Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-22T11:25:28.640Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "cpe"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (\u0027Command Injection\u0027) in Danfoss AK-SM8xxA Series\u0026nbsp;prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system."
            }
          ],
          "value": "Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (\u0027Command Injection\u0027) in Danfoss AK-SM8xxA Series\u00a0prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "HIGH",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-77",
              "description": "CWE-77 Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-22T02:40:46.216Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41451",
    "datePublished": "2025-08-22T02:40:46.216Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-22T11:25:28.640Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2025-41450 (GCVE-0-2025-41450)

    Vulnerability from cvelistv5 – Published: 2025-05-08 09:41 – Updated: 2025-08-27 07:14
    VLAI
    Title
    Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
    Summary
    Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
    Severity
    8.2 (High)
    CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-05-08 13:51 UTC
    CWE
    • CWE-305 - Authentication Bypass by Primary Weakness
    Assigner
    References
    Impacted products
    Vendor Product Version
    Danfoss AK-SM 8xxA Series Affected: 0 , < 4.2 (custom)
    		Create a notification for this product.
    Date Public
    2025-05-08 09:40
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41450",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-08T13:51:39.737731Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-08T13:52:31.326Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AK-SM 8xxA Series",
          "vendor": "Danfoss",
          "versions": [
            {
              "lessThan": "4.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2025-05-08T09:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Authentication vulnerability in Danfoss AKSM8xxA Series.\u003cp\u003eThis issue affects Danfoss AK-SM 8xxA Series prior to version 4.2\u003c/p\u003e"
            }
          ],
          "value": "Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-305",
              "description": "CWE-305: Authentication Bypass by Primary Weakness",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-27T07:14:14.846Z",
        "orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
        "shortName": "Danfoss"
      },
      "references": [
        {
          "url": "https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
    "assignerShortName": "Danfoss",
    "cveId": "CVE-2025-41450",
    "datePublished": "2025-05-08T09:41:20.881Z",
    "dateReserved": "2025-04-16T10:32:42.818Z",
    "dateUpdated": "2025-08-27T07:14:14.846Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}