Skip to content
OpenAdvisories
High · 8.2 Public exploit CVE-2025-41450 EUVD-2025-13996GHSA-6p47-2pgh-wj76

Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

Published May 8, 2025 · Updated Oct 19, 2026 · Assigned by Danfoss

Vendor: Danfoss Product: AK-SM 8xxA Series

Description

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

Affected products

VendorProductAffectedFixed
Danfoss AK-SM 8xxA Series < 4.2 4.2

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

  • msuiche/fromagegate ★ 11 · Oct 13, 2026

    FROMAGEGATE — PoC + detection toolkit for Danfoss AK-SM 8xxA CVE-2025-41450/-41451/-41452 (code-of-the-day auth bypass, alarm-to-mail RCE, nginx config injection). For detection-signature development.

  • Nero22k/CVE-2025-41450_poc ★ 3 · Oct 13, 2026

    CVE-2025-41450

  • GabrieleDattile/CVE-2025-41450-Fromagegate ★ 1 · Nov 2, 2026

    Technical post-mortem, vulnerability analysis, and OT defense blueprint for CVE-2025-41450 & the October 2026 Fromagegate retail cold-chain sabotage incident.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 1

References