Danfoss has 3 CVEs on record. The median CVSS is 8.2 (high). Most affected products: AK-SM8xxA Series (2), AK-SM 8xxA Series (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.2
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2025-41451High· 8.7Post-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series61CVE-2025-41450High· 8.2Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.257CVE-2025-41452Medium· 6.8Post auth nginx configuration injection in Danfoss AK-SM8xxA Series50
Danfoss vulnerabilities
CVEs affecting Danfoss, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2025-41452Medium· 6.8PoCPost auth nginx configuration injection in Danfoss AK-SM8xxA Series
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional cond…
CVE-2025-41451High· 8.7PoCPost-Authentication OS Command Injection RCE in Danfoss AK-SM8xxA Series
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an att…
CVE-2025-41450High· 8.2PoCAuthentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2