Skip to content
OpenAdvisories

Vendor

Danfoss

14 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.8

    Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

    Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

  • Medium 5.3

    Webreport disclosure to unauthorized actor in Danfoss AK-EM100

    The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.