CVE-2023-25914: Authneticated Path Traversal in Danfoss AK-SM800A
Due to improper restriction, attackers could retrieve and read system files of the underlying server through the XML interface.
Other sources
Due to improper restriction, authenticated attackers could retrieve and read system files of the underlying server through the XML interface. The information that can be read can lead to a full system compromise.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25914?
CVE-2023-25914 is a vulnerability that allows attackers to retrieve and read system files of the underlying server through the XML interface.
What is the severity of CVE-2023-25914?
The severity of CVE-2023-25914 is critical with a CVSS score of 7.5.
What software is affected by CVE-2023-25914?
Danfoss Ak-sm 800a Firmware up to version 3.3 is affected by CVE-2023-25914.
How can attackers exploit CVE-2023-25914?
Attackers can exploit CVE-2023-25914 by leveraging the XML interface to retrieve and read system files on the underlying server.
Is Danfoss Ak-sm 800a vulnerable to CVE-2023-25914?
No, Danfoss Ak-sm 800a is not vulnerable to CVE-2023-25914.