CVE-2023-22586: Local File Inclusion in Danfoss AK-EM100
Published Jun 11, 2023
·Updated
The Danfoss AK-EM100 web applications allow for Local File Inclusion in the file parameter.
Affected Software
4 affected components
Danfoss Ak-em100 Firmware<2.2.0.12
Danfoss AK-EM100
All of the following
Danfoss Ak-em100 Firmware<2.2.0.12
Danfoss AK-EM100
Event History
Jun 11, 2023
CVE Published
via MITRE·01:17 PM
Data Sourced
via MITRE·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-22586?
CVE-2023-22586 is a vulnerability that allows for Local File Inclusion in the file parameter of the Danfoss AK-EM100 web applications.
2
What is the severity of CVE-2023-22586?
The severity of CVE-2023-22586 is high, with a severity value of 7.5.
3
Which software is affected by CVE-2023-22586?
The Danfoss AK-EM100 firmware versions up to and excluding 2.2.0.12 are affected by CVE-2023-22586.
4
How can I fix CVE-2023-22586?
To fix CVE-2023-22586, update your Danfoss AK-EM100 firmware to version 2.2.0.12 or higher.
5
Where can I find more information about CVE-2023-22586?
You can find more information about CVE-2023-22586 at the following references: [https://csirt.divd.nl/DIVD-2023-00021](https://csirt.divd.nl/DIVD-2023-00021) and [https://divd.nl/cves/CVE-2023-22586](https://divd.nl/cves/CVE-2023-22586).