CVE-2025-41452 — Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

CVE-2025-41452

Post auth nginx configuration injection in Danfoss AK-SM8xxA Series PUBLISHED

Description (CNA)

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

Affected (CNA)

Vendor / product	Versions
Danfoss / AK-SM8xxA Series	affected 0 before 4.3.1

CWE

CWE-15

References

https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/msuiche/fromagegate