PatchTheCVE: danfosshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-25915: Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the tarhttps://patchthecve.com/cve/CVE-2023-25915.htmlhttps://patchthecve.com/cve/CVE-2023-25915.htmlWed, 17 Jun 2026 05:42:15 +0000CRITICAL 9.9: Due to improper input validation, an authenticated remote attacker could execute arbitrary commands on the target system.CVE-2023-25914: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying sehttps://patchthecve.com/cve/CVE-2023-25914.htmlhttps://patchthecve.com/cve/CVE-2023-25914.htmlWed, 17 Jun 2026 05:42:15 +0000HIGH 8.8: Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.CVE-2023-25913: Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensihttps://patchthecve.com/cve/CVE-2023-25913.htmlhttps://patchthecve.com/cve/CVE-2023-25913.htmlWed, 17 Jun 2026 05:42:15 +0000HIGH 7.5: Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.CVE-2023-25912: The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web reporthttps://patchthecve.com/cve/CVE-2023-25912.htmlhttps://patchthecve.com/cve/CVE-2023-25912.htmlWed, 17 Jun 2026 05:42:15 +0000MEDIUM 5.3: The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.CVE-2023-25911: The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through https://patchthecve.com/cve/CVE-2023-25911.htmlhttps://patchthecve.com/cve/CVE-2023-25911.htmlWed, 17 Jun 2026 05:42:15 +0000CRITICAL 9.9: The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters.CVE-2023-22586: The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.https://patchthecve.com/cve/CVE-2023-22586.htmlhttps://patchthecve.com/cve/CVE-2023-22586.htmlWed, 17 Jun 2026 05:35:41 +0000HIGH 7.7: The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.CVE-2023-22585: The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.https://patchthecve.com/cve/CVE-2023-22585.htmlhttps://patchthecve.com/cve/CVE-2023-22585.htmlWed, 17 Jun 2026 05:35:41 +0000CRITICAL 9.0: The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.CVE-2023-22584: The Danfoss AK-EM100 stores login credentials in cleartext.https://patchthecve.com/cve/CVE-2023-22584.htmlhttps://patchthecve.com/cve/CVE-2023-22584.htmlWed, 17 Jun 2026 05:35:41 +0000HIGH 7.5: The Danfoss AK-EM100 stores login credentials in cleartext.CVE-2023-22583: The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.https://patchthecve.com/cve/CVE-2023-22583.htmlhttps://patchthecve.com/cve/CVE-2023-22583.htmlWed, 17 Jun 2026 05:35:40 +0000CRITICAL 10.0: The Danfoss AK-EM100 web forms allow for SQL injection in the login forms.CVE-2023-22582: The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.https://patchthecve.com/cve/CVE-2023-22582.htmlhttps://patchthecve.com/cve/CVE-2023-22582.htmlWed, 17 Jun 2026 05:35:40 +0000CRITICAL 9.0: The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting.