Unrated severityNVD Advisory· Published Aug 26, 2026· Updated Aug 26, 2026

Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

CVE-2026-15203

Description

Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms

Affected products

Danfoss/iC7 Automation SPllm-create
Danfoss/iC7 Marinellm-create
Danfoss/iC7 7Hybridllm-create

Patches

Vulnerability mechanics

References

assets.danfoss.com/software/latest/572932/ID543724747716-0201.zipmitrepatch
assets.danfoss.com/software/latest/595833/ID506542766960-0501.zipmitrepatch
assets.danfoss.com/software/latest/595835/ID506543688961-0601.zipmitrepatch

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000