Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-25912

Webreport disclosure to unauthorized actor in Danfoss AK-EM100

Description

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Danfoss AK-EM100

Default version status: unaffected

  • < 2.2.0.12 to ≤ 2.2.0.12affected

References