Vulnerabilities > Danfoss > Critical
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-08-21 | CVE-2023-25915 | Unspecified vulnerability in Danfoss Ak-Sm 800A Firmware 3.3 Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system. | 9.8 |
2023-06-11 | CVE-2023-22583 | SQL Injection vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web forms allow for SQL injection in the login forms. | 9.8 |
2023-06-11 | CVE-2023-25911 | Command Injection vulnerability in Danfoss Ak-Em100 Firmware The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. | 9.8 |