Danfoss Security Vulnerabilities

CVE-2023-25915

Due to improper input validation, a remote attacker could execute arbitrary commands on the target...

CVE-2023-25913

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive...

CVE-2023-25914

Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML...

CVE-2023-22582

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site...

CVE-2023-25912

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device...

CVE-2023-22586

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file...

CVE-2023-22584

The Danfoss AK-EM100 stores login credentials in...

CVE-2023-25911

The Danfoss AK-EM100 web applications allow for OS command injection through the web application...

CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title...

CVE-2023-22583

The Danfoss AK-EM100 web forms allow for SQL injection in the login...