Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-41452 EUVD-2025-25498GHSA-2rfj-v79g-2x66

Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Published Aug 22, 2025 · Updated Nov 3, 2026 · Assigned by Danfoss

Description

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

Affected products

VendorProductAffectedFixed
Danfoss AK-SM8xxA Series < 4.3.1 4.3.1

Advisories 1

References