Vulnerabilities > Danfoss > AK Em100 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-11 CVE-2023-22584 Cleartext Storage of Sensitive Information vulnerability in Danfoss Ak-Em100 Firmware
The Danfoss AK-EM100 stores login credentials in cleartext.
network
low complexity
danfoss CWE-312
7.5
2023-06-11 CVE-2023-22586 Information Exposure vulnerability in Danfoss Ak-Em100 Firmware
The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.
network
low complexity
danfoss CWE-200
7.5
2023-06-11 CVE-2023-25911 Command Injection vulnerability in Danfoss Ak-Em100 Firmware
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.
network
low complexity
danfoss CWE-77
8.8