CVE-2025-41452CWE-15

CVE-2025-41452

published August 22, 2025

CVSS
6.8
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00714 · 53.1th percentile
Weakness
CWE-15 · External Control of System or Configuration Setting
Published
2025-08-22T07:15Z
References (2)
https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview · d7ff35af-cf88-454c-bab9-af60602f10f8https://github.com/msuiche/fromagegate · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 22 AUG 02:40Z
    Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
    cvelistv5