MidnightBSD

Advisories for danfoss

CVE-2023-22582

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 9.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H 2.3 6.0

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-22583

The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 10.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 3.9 6.0

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-22584

The Danfoss AK-EM100 stores login credentials in cleartext.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3.9 3.6

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-22585

The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 9.0 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H 2.3 6.0

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-22586

The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 7.4 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L 3.1 3.7

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-25911

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 9.9 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 3.1 6.0

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-25912

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 5.0 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N 3.1 1.4

Products Affected

Vendor Product Version
danfoss ak-em100_firmware *
CVE-2023-25913

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
csirt@divd.nl 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3.9 3.6
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3.9 3.6

Products Affected

Vendor Product Version
danfoss ak-sm_800a_firmware *
CVE-2023-25914

Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 3.9 3.6
csirt@divd.nl 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 2.8 5.9

Products Affected

Vendor Product Version
danfoss ak-sm_800a_firmware *
CVE-2023-25915

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 3.9 5.9
csirt@divd.nl 9.9 CRITICAL CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 3.1 6.0

Products Affected

Vendor Product Version
danfoss ak-sm_800a_firmware *