Vulnerabilities > Danfoss > AK Em100 Firmware > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-06-11 | CVE-2023-22584 | Cleartext Storage of Sensitive Information vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 stores login credentials in cleartext. | 7.5 |
2023-06-11 | CVE-2023-22586 | Information Exposure vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. | 7.5 |
2023-06-11 | CVE-2023-25911 | Command Injection vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. | 8.8 |