{"id":"CVE-2025-41452","title":"Post auth nginx configuration injection in Danfoss AK-SM8xxA Series","summary":"Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional cond…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","cvssSource":"cna","cwe":["CWE-15"],"vendor":"Danfoss","product":"AK-SM8xxA Series","affected":["ak-sm8xxa_series < 4.3.1"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-19T19:13:03.974394Z"},"exploitAvailable":true,"published":"2025-08-22","updated":"2026-10-19","sourceUpdated":"2026-10-19T19:13:21.555Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-41452","references":[{"url":"https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview"}],"tags":["cve.org","exploit-available"],"epss":0.00925,"epssPercentile":0.60252,"ingestedAt":"2026-10-19T19:38:06.460Z","slug":"CVE-2025-41452","body":"## Overview\n\nPost-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions\n\n## Affected\n\n- `ak-sm8xxa_series < 4.3.1`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":50,"depthScoreParts":{"impact":37.4,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}