ak-sm8xxa_series vulnerabilities
CVEs whose affected-version data names the ak-sm8xxa_series package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-41452Medium· 6.8PoCPost auth nginx configuration injection in Danfoss AK-SM8xxA Series
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional cond…
▾ TwilightDanfoss · AK-SM8xxA SeriesEPSS 0.92%via CVEORG
CVE-2025-41451High· 8.7PoCPost-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an att…
▾ MidnightDanfoss · AK-SM8xxA SeriesEPSS 4.5%via CVEORG