Danfoss

Products

ProductCVEsExploitedLatest
AK-EM1007–Jun 11, 2023
AK-SM800A3–Aug 21, 2023
AK-SM8xxA Series2–Aug 22, 2025
AK-SM 8xxA Series1–May 8, 2025
iC7-Automation SP1–Aug 26, 2026
iC7-Hybrid1–Aug 26, 2026
iC7-Marine1–Aug 26, 2026

Exploited and recent CVEs

  • CVE-2026-15203 Critical 9.3 Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software 0.5%
  • CVE-2026-15203 Critical 9.3 Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software 0.5%
  • CVE-2026-15203 Critical 9.3 Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software 0.5%
  • CVE-2025-41452 Medium 6.8 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series 0.9%
  • CVE-2025-41451 High 8.7 Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series 4.5%
  • CVE-2025-41450 High 8.2 Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2 0.9%
  • CVE-2023-25913 High 7.5 Authentication Bypass in Danfoss AK-SM800A 0.6%
  • CVE-2023-25914 High 8.8 Authneticated Path Traversal in Danfoss AK-SM800A 0.8%
  • CVE-2023-25915 Critical 9.9 Authenticated Remote Command Execution in Danfoss AK-SM800A 1.0%
  • CVE-2023-25911 Critical 9.9 Authenticated OS Command Injection in Danfoss AK-EM100 2.2%
  • CVE-2023-22583 Critical 10.0 SQL Injection in Danfoss AK-EM100 0.8%
  • CVE-2023-22582 Critical 9.0 Reflected Cross-Site Scripting in Danfoss AK-EM100 0.6%
  • CVE-2023-22584 High 7.5 Cleartext credentials in Danfoss AK-EM100 0.5%
  • CVE-2023-22585 Critical 9.0 Reflected Cross-Site Scripting in Danfoss AK-EM100 0.6%
  • CVE-2023-22586 High 7.7 Local File Inclusion in Danfoss AK-EM100 0.7%
  • CVE-2023-25912 Medium 5.3 Webreport disclosure to unauthorized actor in Danfoss AK-EM100 0.6%