CVE-2023-25913
Authentication Bypass in Danfoss AK-SM800A
| CVE | CVE-2023-25913 | |||||||||||
| Title | Authentication Bypass in Danfoss AK-SM800A | |||||||||||
| Credits |
|
|||||||||||
| Affected products |
|
|||||||||||
| CVSS |
Base score:
6.5
(MEDIUM) |
|||||||||||
| References |
|
|||||||||||
| Problem type(s) | CWE-200 Exposure of Sensitive Information to an Unauthorized Actor | |||||||||||
| Date published | ||||||||||||
| Last modified |
Description
Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.
Workaround(s)
Upgrade to the latest patch, which is version 3.3.
JSON version.