Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2023-25911

Authenticated OS Command Injection in Danfoss AK-EM100

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
DIVD

Description

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Danfoss AK-EM100

Default version status: unaffected

  • < 2.2.0.12affected

References