Description
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Danfoss iC7-Automation SP
Default version status: unaffected
0 to ≤ 2025.3.3affected
Danfoss iC7-Marine
Default version status: unaffected
0 to ≤ 2025.8.19affected
Danfoss iC7-Hybrid
Default version status: unaffected
0 to ≤ 2025.10.300845affected