Skip to content
Multiple Vulnerabilities Discovered in Danfoss AK-SM8xxA Series

Multiple Vulnerabilities Discovered in Danfoss AK-SM8xxA Series

First seen 19 Oct 2026, 13:49 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 19, 2026 at 14:52 UTC
  • •Three high-severity vulnerabilities identified in Danfoss AK-SM8xxA Series.
  • •CVE-2025-41450 allows authentication bypass; CVE-2025-41451 enables remote code execution.
  • •Patches for all vulnerabilities are available in version 4.3.1.

Three vulnerabilities have been identified in the Danfoss AK-SM8xxA Series, affecting versions prior to 4.3.1. CVE-2025-41450 allows authentication bypass, potentially exposing sensitive information. CVE-2025-41451 involves command injection leading to remote code execution, while CVE-2025-41452 could enable denial-of-service attacks. The vulnerabilities were disclosed on October 19, 2026, with patches released by Danfoss. Users are urged to update to version 4.3.1 to mitigate these risks. The vulnerabilities have been assigned CVSS scores of 8.2 and 8.7, indicating high severity. Team82 has committed to coordinated disclosure and has made its PGP key available for secure communication regarding these vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2025-05-08
CVE-2025-41450 published
Authentication bypass vulnerability disclosed with a CVSS score of 8.2.
claroty.com
2025-08-22
CVE-2025-41451 and CVE-2025-41452 published
Two vulnerabilities published, CVE-2025-41451 has a CVSS score of 8.7 and CVE-2025-41452 has a score of 6.8.
claroty.com
2026-10-19
Patches released for vulnerabilities
Danfoss released version 4.3.1 to address the identified vulnerabilities in the AK-SM8xxA Series.
claroty.com

More articles in this cluster (3)

Following this threat?

Track Danfoss and CVE-2025-41450 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

What versions of the Danfoss AK-SM8xxA Series are affected?
Versions prior to 4.3.1 are affected by the vulnerabilities.
What should I do to protect my systems?
Update to version 4.3.1 as soon as possible to mitigate the vulnerabilities.
Are these vulnerabilities currently being exploited?
No confirmed exploitation has been reported; however, they are considered high severity.