Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Danfoss AK-SM8xxA Series 4.3.1 Clear all filters
TI-2025-27608 CVE-2025-41452 · GHSA-2rfj-v79g-2x66

Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Priority MEDIUM 63

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of…

CVSS 4.0MEDIUM 6.8 Network High privileges User interaction EPSS 0.00925 Published 2025-08-22 Fixed in 4.3.1 CWE-15
TI-2025-27607 CVE-2025-41451 · GHSA-r7mx-84m9-9h4q

Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series

Priority HIGH 73

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code ex…

CVSS 4.0HIGH 8.7 Network High privileges User interaction EPSS 0.04462 Published 2025-08-22 Fixed in 4.3.1 CWE-77