CVE-2025-41450CWE-305

CVE-2025-41450

High · published May 8, 2025

CVSS v3.1
8.2
EPSS
1%
Percentile
54.9
In the wild
Unconfirmed
What it is

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00764 · 54.9th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2025-05-08T14:15Z
References (2)
https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/ · d7ff35af-cf88-454c-bab9-af60602f10f8https://github.com/msuiche/fromagegate · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 08 MAY 09:41Z
    Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
    cvelistv5