Danfoss Ak-Em100 Firmware
7 CVEs affecting Danfoss Ak-Em100 Firmware. Latest disclosed: 2023-06-11. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22583 | Critical | 10.0 | 2023-06-11 | The Danfoss AK-EM100 web forms allow for SQL injection in the login forms. |
CVE-2023-25911 | Critical | 9.9 | 2023-06-11 | The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. |
CVE-2023-22585 | Critical | 9.0 | 2023-06-11 | The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter. |
CVE-2023-22582 | Critical | 9.0 | 2023-06-11 | The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting. |
CVE-2023-22586 | High | 7.7 | 2023-06-11 | The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. |
CVE-2023-22584 | High | 7.5 | 2023-06-11 | The Danfoss AK-EM100 stores login credentials in cleartext. |
CVE-2023-25912 | Medium | 5.3 | 2023-06-11 | The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the… |