PT-2025-20370 · Danfoss · Danfoss Ak-Sm 8Xxa Series

Published 2025-05-08 · Updated 2025-08-27 · CVE-2025-41450

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions Danfoss AK-SM 8xxA Series versions prior to 4.2

Description The issue is related to an improper authentication vulnerability in the Danfoss AKSM8xxA Series. This vulnerability affects the Danfoss AK-SM 8xxA Series prior to version 4.2.

Recommendations For Danfoss AK-SM 8xxA Series versions prior to 4.2, update to version 4.2 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-305

Related Identifiers

CVE-2025-41450

Affected Products

Danfoss Ak-Sm 8Xxa Series

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-41450 · Security Note
• https://twitter.com/cracbot/status/1922245502717862271 · Twitter Post
• https://sm800a.danfoss.com/sw_shared/SM800A-4.2.4.spk · Note
• https://t.me/cvedetector/24814 · Telegram Post
• https://twitter.com/autumn_good_35/status/1925292867544916097 · Twitter Post
• https://danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01 · Note
• https://t.me/latest_high_impact_cve/2302 · Telegram Post
• https://t.me/cvenotify/121329 · Telegram Post
• https://t.me/cvetracker/23348 · Telegram Post
• https://t.me/cveNotify/133660 · Telegram Post
• https://t.me/cvenotify/122097 · Telegram Post
• https://twitter.com/CVEnew/status/1920416032239595627 · Twitter Post