BaseFortify

Publication date: 2025-05-08

Last updated on: 2026-10-19

Assigner: Danfoss

Description

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-05-08

Last Modified

2026-10-19

Generated

2026-10-23

AI Q&A

2025-05-08

EPSS Evaluated

2026-10-20

NVD

CVE-2025-41450

Affected Vendors & Products

Vendor	Product	Version / Range
Danfoss	AK-SM 8xxA Series	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-305	The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Authentication issue in the Danfoss AKSM8xxA Series. It affects models in the Danfoss AK-SM 8xxA Series released prior to version 4.2, meaning an attacker could potentially bypass proper authentication measures. [1]

Impact Analysis

Since the vulnerability involves improper authentication, it could allow an attacker unauthorized access to the affected devices. This means that if you are using devices from the Danfoss AKSM8xxA Series prior to version 4.2, you might face risks such as unauthorized control or disruption of service. [1]

Mitigation Strategies

The provided text indicates that the vulnerability affects Danfoss AK-SM 8xxA Series devices running versions prior to 4.2. An immediate step is to upgrade to version 4.2 (or later) to address the improper authentication issue. [1]

Hi! I’m here to help you understand CVE-2025-41450. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70