Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-25914

Authneticated Path Traversal in Danfoss AK-SM800A

Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Danfoss
Products
Ak-sm 800a Ak-sm 800a Firmware
CVE-2023-25915

Authenticated Remote Command Execution in Danfoss AK-SM800A

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.

CVSS 3.1 · 9.9 Critical EPSS 1.0% KEV · Not listed
Vendors
Danfoss
Products
Ak-sm 800a Ak-sm 800a Firmware
CVE-2023-25913

Authentication Bypass in Danfoss AK-SM800A

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Danfoss
Products
Ak-sm 800a Ak-sm 800a Firmware