Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-25914

Authneticated Path Traversal in Danfoss AK-SM800A

Description

Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Danfoss AK-SM800A

Default version status: unaffected

  • < 3.3affected

References