We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-25913

Authentication Bypass in Danfoss AK-SM800A



AssignerDIVD
Reserved2023-02-16
Published2023-08-21
Updated2024-10-02

Description

Because of an authentication flaw an attacker would be capable of generating a web report that discloses sensitive information such as internal IP addresses, usernames, store names and other sensitive information.



HIGH: 7.7CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-287 Improper Authentication

Product status

Default status
unaffected

< 3.3
affected

Credits

Jony Schats (HackDefense) 0x40075753f0

Stan Plasmeijer (HackDefense) 0x4007575410

Max van der Horst (DIVD) 0x4007575430

References

https://csirt.divd.nl/CVE-2023-25913 third-party-advisory

https://csirt.divd.nl/DIVD-2023-00025 third-party-advisory

cve.org CVE-2023-25913

nvd.nist.gov CVE-2023-25913

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.

© Copyright 2024 THREATINT
Made in Cyprus with ❤ + ☼
 System status
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
Error loading Crisp.chat. Please check your web content filter and browser plugins.