Description
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Danfoss | AK-SM8xxA Series | < 4.3.1 | 4.3.1 |
Advisories 1
- ICSA-25-140-03 Danfoss AK-SM 8xxA Series (Update A) CISA ICS & IT advisories · Aug 26, 2025