{"id":"CVE-2025-41450","aliases":["EUVD-2025-13996","GHSA-6p47-2pgh-wj76"],"status":"published","title":"Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2","description":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00965,"percentile":0.62125,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-287","CWE-305"],"published":"2025-05-08T09:41:20Z","modified":"2026-10-19T21:31:27Z","exploits":[{"source":"pocgithub","id":"Nero22k/CVE-2025-41450_poc","title":"Nero22k/CVE-2025-41450_poc","date":"2026-10-13","url":"https://github.com/Nero22k/CVE-2025-41450_poc"},{"source":"pocgithub","id":"msuiche/fromagegate","title":"msuiche/fromagegate","date":"2026-10-13","url":"https://github.com/msuiche/fromagegate"},{"source":"pocgithub","id":"GabrieleDattile/CVE-2025-41450-Fromagegate","title":"GabrieleDattile/CVE-2025-41450-Fromagegate","date":"2026-11-02","url":"https://github.com/GabrieleDattile/CVE-2025-41450-Fromagegate"}],"products":[{"vendor":"danfoss","product":"ak-sm 8xxa series"}],"references":[{"url":"https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01/"},{"url":"https://github.com/msuiche/fromagegate","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-41450"},{"url":"https://sm800a.danfoss.com/sw_shared/SM800A-4.2.4.spk"},{"url":"https://www.danfoss.com/en/service-and-support/coordinated-vulnerability-disclosure/danfoss-security-advisories/dsa-2025-03-01"},{"url":"https://github.com/advisories/GHSA-6p47-2pgh-wj76"}],"sources":{"cve":[{"id":"CVE-2025-41450","title":"Authentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2","description":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2","status":"published","published":"2025-05-08T09:41:20.881Z","modified":"2026-10-19T19:12:08.85Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:32:31.631102Z"}],"euvd":[{"id":"EUVD-2025-13996","description":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2","status":"published","published":"2025-05-08T09:41:20Z","modified":"2026-10-19T19:12:08Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T16:59:48.678173Z"}],"ghsa":[{"id":"GHSA-6p47-2pgh-wj76","title":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM...","description":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2","status":"published","published":"2025-05-08T12:34:29Z","modified":"2026-10-19T21:31:27Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H","level":"high"}],"cwes":["CWE-287","CWE-305"],"updated_at":"2026-11-02T15:13:58.199856Z"}],"nvd":[{"id":"CVE-2025-41450","description":"Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2","status":"published","published":"2025-05-08T10:15:18.38Z","modified":"2026-10-19T20:17:34.987Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:11:06.085152Z"}]}}