BaseFortify

Publication date: 2025-08-22

Last updated on: 2026-10-19

Assigner: Danfoss

Description

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-08-22

Last Modified

2026-10-19

Generated

2026-10-23

AI Q&A

2025-08-22

EPSS Evaluated

2026-10-20

NVD

CVE-2025-41452

EUVD

EUVD-2025-25498

Affected Vendors & Products

Vendor	Product	Version / Range
danfoss	ak-sm_800a	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-15	One or more system settings or configuration elements can be externally controlled by a user.

Attack-Flow Graph

Executive Summary

This vulnerability is a post-authenticated external control issue in the web interface configuration settings of Danfoss AK-SM8xxA Series devices prior to version 4.3.1. It allows an attacker with certain privileges to cause a denial of service by exploiting improper handling of exceptional conditions in the system.

Impact Analysis

The vulnerability can lead to a denial of service attack, which means the affected system or device could become unavailable or unresponsive, potentially disrupting normal operations.

Hi! I’m here to help you understand CVE-2025-41452. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70