9.9

CVE-2023-25915

Authenticated Remote Command Execution in Danfoss AK-SM800A

Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Danfoss ≫ Ak-sm 800a Firmware Version <= 3.3
   Danfoss ≫ Ak-sm 800a Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.51
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
csirt@divd.nl 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://csirt.divd.nl/DIVD-2023-00025
Third Party Advisory
https://csirt.divd.nl/CVE-2023-25915
Third Party Advisory