ak-em100 firmware vulnerabilities and fixes

Recent CVEs affecting ak-em100 firmware, with upgrade or downgrade steps. 7 tracked.

Also searched as: ak em100 firmware, ak-em100firmware.

ak-em100 firmware has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-06-11. Highest priority: CVE-2023-25911 (score 55/100).

• CVE-2023-25912 MEDIUM 5.3 UPGRADE The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report
• CVE-2023-25911 CRITICAL 9.9 UPGRADE The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through
• CVE-2023-22586 HIGH 7.7 UPGRADE The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.
• CVE-2023-22585 CRITICAL 9.0 UPGRADE The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.
• CVE-2023-22584 HIGH 7.5 UPGRADE The Danfoss AK-EM100 stores login credentials in cleartext.
• CVE-2023-22583 CRITICAL 10.0 UPGRADE The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.
• CVE-2023-22582 CRITICAL 9.0 UPGRADE The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.

FAQ

How do I fix ak-em100 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ak-em100 firmware being exploited right now?

None of the tracked ak-em100 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ak-em100 firmware CVE should I patch first?

CVE-2023-25911 currently ranks highest (55/100): The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through .

RSS feed for ak-em100 firmware · ← Back to latest CVEs