Skip to the content.

CVE-2023-22586 - Local File Inclusion in Danfoss AK-EM 100

CVE CVE-2023-22586
Discovered by
  • Jony Schats and Stan Plasmeijer (HackDefense)
Credits
Affected products
Product Affected Unaffected Unknown
Danfoss AK-EM 100 = < 2.2.0.12
everything else
Page author Max van der Horst
CVSS Base score: 7.4 (HIGH)
References
Problem type(s) CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
Last modified 25 May 2023 17:56

Description

The Danfoss AK-EM 100 web applications allow for Local File Inclusion in the file parameter.


JSON version