AK Em100 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-11	CVE-2023-22582	Cross-site Scripting vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting. network low complexity danfoss CWE-79	6.1
2023-06-11	CVE-2023-22583	SQL Injection vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web forms allow for SQL injection in the login forms. network low complexity danfoss CWE-89 critical	9.8
2023-06-11	CVE-2023-22584	Cleartext Storage of Sensitive Information vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 stores login credentials in cleartext. network low complexity danfoss CWE-312	7.5
2023-06-11	CVE-2023-22585	Cross-site Scripting vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter. network low complexity danfoss CWE-79	6.1
2023-06-11	CVE-2023-22586	Information Exposure vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. network low complexity danfoss CWE-200	7.5
2023-06-11	CVE-2023-25911	Command Injection vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. network low complexity danfoss CWE-77 critical	9.8
2023-06-11	CVE-2023-25912	Information Exposure vulnerability in Danfoss Ak-Em100 Firmware The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values. network low complexity danfoss CWE-200	5.3