Danfoss: CVE Program partner

CVEs, 365 days14 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Danfoss
Role	CNA
Type	Vendor
Reports to	icscert → CISA
Scope	Danfoss products only.
Advisories	https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/

CVE-2026-15203 2026-08-26 · CVSS 9.3
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write acc
CVE-2025-41452 2025-08-22 · CVSS 6.8
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow fo
CVE-2025-41451 2025-08-22 · CVSS 8.7
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3
CVE-2025-41450 2025-05-08 · CVSS 8.2
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2

Danfoss