Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2023-25911

Authenticated OS Command Injection in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

CVSS 3.1 · 9.9 Critical EPSS 2.2% KEV · Not listed
Vendors
Danfoss
Products
Ak-em100 Ak-em100 Firmware
CVE-2023-25912

Webreport disclosure to unauthorized actor in Danfoss AK-EM100

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Danfoss
Products
Ak-em100 Ak-em100 Firmware
CVE-2023-22585

Reflected Cross-Site Scripting in Danfoss AK-EM100

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Danfoss
Products
Ak-em100 Ak-em100 Firmware