Danfoss security advisories

Advisory-ID

Assigned CVE-ID

Title

Affected products and services

Recommendation

Last update

DSA-2025-03-01

• CVE-2025-41450

Improper Authentication vulnerability in Danfoss AK-SM8xxA Series, resulting in an authentication bypass.

Danfoss AK-SM 8xxA Series prior to version 4.2

Install the latest
software version through AK-SM 800A
Series | Danfoss.

2025-3-24

Advisory-ID

Assigned CVE-ID

Title

Affected products and services

Recommendation

Last update

DSA-2023-08-01

• CVE-2023-25913
• CVE-2023-25914
• CVE-2023-25915

Insufficient restrictions and input sanitization exist in Danfoss AK-SM 800A, potentially leading to full system
compromise

Danfoss AK-SM 800A all
Series with SW version
below/before 3.3

Install the latest
software version through AK-SM 800A
Series | Danfoss.

21 Aug, 2023

• CVE-2023-22583
• CVE-2023-22584
• CVE-2023-22585
• CVE-2023-22586
• CVE-2023-25911
• CVE-2023-25912

Multiple vulnerabilities including critical
ones exist in Danfoss AK-EM 100, potentially
leading to unauthorized access and full
system compromise

Danfoss AK-EM 100 all
Series

phase out Danfoss
AK-EM 100, upgrade
to AK-SM 800A in
combination with
Alsense cloud
service.

25 May, 2023