PT-2023-20359 · Danfoss · Ak-Sm800A+1

Jony Schats + 3 · Published 2023-08-21 · Updated 2025-01-17 · CVE-2023-25914

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software (affected versions not specified)

Description Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface, potentially leading to a full system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-25914

Affected Products

Ak-Sm800A

Ak-Sm 800A Firmware

References · 10

• https://osv.dev/vulnerability/CVE-2023-25914 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-25914 · Security Note
• https://t.me/cibsecurity/68914 · Telegram Post
• https://t.me/cvenotify/57030 · Telegram Post
• https://twitter.com/cracbot/status/1693865661397864506 · Twitter Post
• https://t.me/cvenotify/57232 · Telegram Post
• https://t.me/cvenotify/107788 · Telegram Post
• https://csirt.divd.nl/CVE-2023-25914 · Note
• https://csirt.divd.nl/DIVD-2023-00025 · Note
• https://t.me/cvenotify/57042 · Telegram Post