The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Oct 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
16 Jun 2023, 03:50
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:danfoss:ak-em100:-:*:*:*:*:*:*:* cpe:2.3:o:danfoss:ak-em100_firmware:*:*:*:*:*:*:*:* |
|
| CWE | CWE-200 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| References | (MISC) https://csirt.divd.nl/DIVD-2023-00021 - Third Party Advisory | |
| References | (MISC) https://divd.nl/cves/CVE-2023-25912 - Broken Link, Third Party Advisory |
11 Jun 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-11 14:15
Updated : 2024-10-16 12:15
NVD link : CVE-2023-25912
Mitre link : CVE-2023-25912
CVE.ORG link : CVE-2023-25912
JSON object : View
Products Affected
danfoss
- ak-em100
- ak-em100_firmware
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor