Danfoss vulnerabilities

CVEs per yearBy the year they were published

1. 202310
2. 20253
3. 20261

Newest CVEs

• CVE-2026-15203

  Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

  Danfoss · iC7-Automation SP

  Critical9.3
• CVE-2025-41452

  Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

  Danfoss · AK-SM8xxA Series

  Medium6.8
• CVE-2025-41451

  Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series

  Danfoss · AK-SM8xxA Series

  High8.7
• CVE-2025-41450

  Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

  Danfoss · AK-SM 8xxA Series

  High8.2
• CVE-2023-25913

  Authentication Bypass in Danfoss AK-SM800A

  Danfoss · AK-SM800A

  High7.5
• CVE-2023-25914

  Authneticated Path Traversal in Danfoss AK-SM800A

  Danfoss · AK-SM800A

  High8.8
• CVE-2023-25915

  Authenticated Remote Command Execution in Danfoss AK-SM800A

  Danfoss · AK-SM800A

  Critical9.9
• CVE-2023-25911

  Authenticated OS Command Injection in Danfoss AK-EM100

  Danfoss · AK-EM100

  Critical9.9
• CVE-2023-22583

  SQL Injection in Danfoss AK-EM100

  Danfoss · AK-EM100

  Critical10.0
• CVE-2023-22582

  Reflected Cross-Site Scripting in Danfoss AK-EM100

  Danfoss · AK-EM100

  Critical9.0