CVE Intelligence

Danfoss AK-SM8xxA Series vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Danfoss AK-SM8xxA Series: 2 record(s), with affected versions and fixes.

CVE-2025-41452 Medium · 6.8 CWE-15 Aug 22, 2025
Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions
CVE-2025-41451 High · 8.7 CWE-77 Aug 22, 2025
Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.