Vulnerabilities > Danfoss > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-08-21 CVE-2023-25915 Unspecified vulnerability in Danfoss Ak-Sm 800A Firmware 3.3
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
network
low complexity
danfoss
critical
9.8
2023-06-11 CVE-2023-22583 SQL Injection vulnerability in Danfoss Ak-Em100 Firmware
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.
network
low complexity
danfoss CWE-89
critical
9.8
2023-06-11 CVE-2023-25911 Command Injection vulnerability in Danfoss Ak-Em100 Firmware
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.
network
low complexity
danfoss CWE-77
critical
9.8