← All advisories

Critical severity9.9NVD Advisory· Published Jun 11, 2023· Updated Jun 17, 2026

CVE-2023-25911

CVE-2023-25911

Description

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.

Affected products

3

Danfoss/Ak Em100 Firmware
cpe:2.3:o:danfoss:ak-em100_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0.12
Danfoss/AK-EM100llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: < 2.2.0.12

Patches

Vulnerability mechanics

References

4

csirt.divd.nl/CVE-2023-25911/nvdThird Party Advisory
csirt.divd.nl/DIVD-2023-00021nvdThird Party Advisory
csirt.divd.nl/DIVD-2023-00021/nvdThird Party Advisory
divd.nl/cves/CVE-2023-25911nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.