Description
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Danfoss | iC7-Automation SP | ≤ 2025.3.3 | — |
| Danfoss | iC7-Marine | ≤ 2025.8.19 | — |
| Danfoss | iC7-Hybrid | ≤ 2025.10.300845 | — |