Approved changes feed: RSS · Atom

cpe:2.3:a:danfoss:ak-sm8xxa_series:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDanfoss (4a381c1e-2f85-5f8c-b4e6-c3ced60eda9c)
ProductAk Sm8Xxa Series (9148cb2e-0195-5300-b8b6-51ea4463cbcf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41452 vulnerable 2026-06-08 07:25:07.074226 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions
Published: 2025-08-22T02:40:53.563Z
Updated: 2025-08-22T10:52:36.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41451 vulnerable 2026-06-08 07:25:07.073796 Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
Published: 2025-08-22T02:40:46.216Z
Updated: 2025-08-22T11:25:28.640Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.