Vulnerabilities > Danfoss > AK SM 800A Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2023-08-21 CVE-2023-25913 Improper Authentication vulnerability in Danfoss Ak-Sm 800A Firmware
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
network
low complexity
danfoss CWE-287
7.5
2023-08-21 CVE-2023-25914 Path Traversal vulnerability in Danfoss Ak-Sm 800A Firmware
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface.
network
low complexity
danfoss CWE-22
7.5