Medium severity5.3NVD Advisory· Published Jun 11, 2023· Updated Jun 17, 2026

CVE-2023-25912

Description

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

Affected products

Danfoss/AK-EM100llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: < 2.2.0.12
Danfoss/Ak Em100 Firmware
cpe:2.3:o:danfoss:ak-em100_firmware:*:*:*:*:*:*:*:*
Range: <2.2.0.12

Patches

Vulnerability mechanics

References

csirt.divd.nl/CVE-2023-25912/nvd
csirt.divd.nl/DIVD-2023-00021nvd
csirt.divd.nl/DIVD-2023-00021/nvd
divd.nl/cves/CVE-2023-25912nvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000