CVE-2023-25915
CRITICALDanfoss AK-SM 800A Firmware < 3.3 - Authenticated Remote Code Execution
Title source: llmDescription
Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
References (2)
Core 2
Core References
Third Party Advisory third-party-advisory
https://csirt.divd.nl/CVE-2023-25915
Third Party Advisory third-party-advisory
https://csirt.divd.nl/DIVD-2023-00025
Scores
CVSS v3
9.9
EPSS
0.0078
EPSS Percentile
51.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-20
Status
published
Products (1)
danfoss/ak-sm_800a_firmware
< 3.3
Published
Aug 21, 2023
Tracked Since
Feb 18, 2026