CVE-2023-25912

Published: Jun 11, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.

Affected (1)

Products: Danfoss: Ak Em100 Firmware

Danfoss

1 product

Ak Em100 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Danfoss Ak Em100 Firmware	Before 2.2.0.12

Running on/with	Platform Versions
Danfoss Ak Em100	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

https://csirt.divd.nl/CVE-2023-25912/

Source: csirt@divd.nl

https://csirt.divd.nl/DIVD-2023-00021/

Source: csirt@divd.nl

https://csirt.divd.nl/DIVD-2023-00021

Source: af854a3a-2127-422b-91ae-364da2661108

https://divd.nl/cves/CVE-2023-25912

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.