Description (CNA)
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Danfoss / iC7-Automation SP | affected 0 through 2025.3.3 |
| Danfoss / iC7-Marine | affected 0 through 2025.8.19 |
| Danfoss / iC7-Hybrid | affected 0 through 2025.10.300845 |
CWE
CWE-1191
References
- https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip
- https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip
- https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip
ADP enrichment
No English description supplied.
No references supplied.