AK-SM800A vulnerabilities

2 known vulnerabilities in AK-SM800A from Danfoss. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  AK-SM800A: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-25914Aug 21, 2023Danfoss

  Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.

• 7.5 High severity

  AK-SM800A: Improper Authentication

  CVE-2023-25913Aug 21, 2023Danfoss

  Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.