CVE-2023-25912 — Webreport disclosure to unauthorized actor in Danfoss AK-EM100

CVE-2023-25912

Webreport disclosure to unauthorized actor in Danfoss AK-EM100 PUBLISHED

Description (CNA)

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

Affected (CNA)

Vendor / product	Versions
Danfoss / AK-EM100	affected < 2.2.0.12 through 2.2.0.12

CWE

CWE-200

References

https://csirt.divd.nl/CVE-2023-25912/
https://csirt.divd.nl/DIVD-2023-00021/

ADP enrichment

CVE

No English description supplied.

https://divd.nl/cves/CVE-2023-25912
https://csirt.divd.nl/DIVD-2023-00021

CISA-ADP

No English description supplied.

No references supplied.