What’s Vulnerable › Vulnerabilities

CVE-2025-41450: Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-08 · updated 2026-10-19
• Weakness: CWE-305

Description

Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

Affected products

• Danfoss AK-SM 8xxA Series: before 4.2 — fixed in 4.2

How to fix

Upgrade to a fixed version: Danfoss AK-SM 8xxA Series 4.2. Check the vendor advisory for mitigations.

References

• https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/
• https://github.com/msuiche/fromagegate

Get alerted when CVE-2025-41450 or the next vulnerability affects your stack