CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Do not click web links or open attachments in unsolicited email messages.
Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.
Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.
No known public exploitation specifically targeting these vulnerabilities have been reported to CISA at this time. These vulnerabilities have a high attack complexity.
Credit: Tomer Goldschmidt (Claroty Team82)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-41450 | CWE-287 Improper Authentication | 8.2 High |
An unauthorized access vulnerability, caused by datetime-based password generation, could potentially result in an authenticaion bypass in Danfoss AK-SM8xxA Series, prior to version R4.2. Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: For more information, see the Danfoss security advisories. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-41451 | CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') | 7.6 High |
Improper neutralization of alarm-to-mail configuration fields used in an OS shell command injection in Danfoss AK-SM8xxA Series, prior to version 4.3.1, may lead to post-authenticated remote code execution on an attacked system. Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: For more information, see the Danfoss security advisories. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-41452 | CWE-15 External Control of System or Configuration Setting | 5.4 Medium |
A post-authenticated external control of system web interface configuration setting vulnerability exists in the Danfoss AK-SM8xxA Series prior to version 4.3.1, which could allow for a denial-of-service attack induced by improper handling of exceptional conditions. Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: Danfoss created release R4.2 to address CVE-2025-41450 and release R4.3.1 to address CVE-2025-41451 and CVE-2025-41452. Users can obtain and install the latest version by following the AK-SM 800A Software Upgrade Process. ↗ Mitigation: For more information, see the Danfoss security advisories. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
| Date | Source | Article |
|---|---|---|
| 2026-10-24 | FortiGuard Labs Threat Signal | OT Refrigeration Control Systems Attack CVE-2025-41450 |
Articles from the monitored vendor research blogs and security news feeds that reference a CVE cited in this publication, or name the campaign it covers. Coverage begins when feed monitoring started; earlier articles are not indexed.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-41451 | 8.7 High | Danfoss AK-SM8xxA Series Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to … |
| CVE-2025-41450 | 8.2 High | Danfoss AK-SM 8xxA Series Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2 |
| CVE-2025-41452 | 6.8 Medium | Danfoss AK-SM8xxA Series Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which cou… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.