CVE-2023-259148.8High
CVE-2023-25914: Authneticated Path Traversal in Danfoss AK-SM800A
Danfoss · AK-SM800A
No fix listed · Affected: Danfoss AK-SM800A · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.8%probability of exploitation in the next 30 days
57th percentile
050100
Higher than 57% of scored CVEs
8.8HighCVSS
LowMediumHighCrit.
DescriptionNVD
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
Coverage1 article · 1 outlet
First in our coverage: dti.domaintools.com, 12 Nov.
- Iranian cyber unit blamed for attacks on European refrigeration systemsdti.domaintools.com · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.