Skip to content
OpenAdvisories

Vendor

Danfoss

14 known vulnerabilities.

Products

AK-EM100 7 AK-SM800A 3 AK-SM8xxA Series 2 AK-SM 8xxA Series 1 iC7-Automation SP 1 iC7-Marine 1 iC7-Hybrid 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-15203

    Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

    Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data a…

    Danfoss iC7-Marine iC7-Automation SP iC7-Hybrid
  • Critical 9.9
    CVE-2023-25915

    Authenticated Remote Command Execution in Danfoss AK-SM800A

    Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.

    Danfoss AK-SM800A
  • Critical 9.9
    CVE-2023-25911

    Authenticated OS Command Injection in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

    Danfoss AK-EM100
  • Critical 9.0
    CVE-2023-22582

    Reflected Cross-Site Scripting in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.

    Danfoss AK-EM100
  • Critical 10.0
    CVE-2023-22583

    SQL Injection in Danfoss AK-EM100

    The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.

    Danfoss AK-EM100
  • Critical 9.0
    CVE-2023-22585

    Reflected Cross-Site Scripting in Danfoss AK-EM100

    The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.

    Danfoss AK-EM100