CVEs (7)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values. |
The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters. |
The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter. |
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter. |
The Danfoss AK-EM100 stores login credentials in cleartext. |
The Danfoss AK-EM100 web forms allow for SQL injection in the login forms. |
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting. |