CVE-2025-41452Proof of concept (PoC) published · CISA
Post auth nginx configuration injection in Danfoss AK-SM8xxA Series
CVSS score
6.8
EPSS probability
%0.3
Risk score
0.0
Published
1 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said. The attackers reached them through the controller that runs all of a store's fridges and freezers, a device made by Danish company Danfoss that maintenance firms can manage remotely. Les Mousquetaires
Similar Vulnerabilities
8.7
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-41452"