Danfoss Ak-sm 800a Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Danfoss Ak-sm 800a Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-25915 — CVSS 9.9 (critical): Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
• CVE-2023-25914 — CVSS 8.8 (high): Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML…
• CVE-2023-25913 — CVSS 7.5 (high): Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as…