Danfoss

First CVE: May 8, 2025Active for: 1 year
3
CVEs Published
More CVEs Published than 9% of tracked CNAs
3.0
Avg CVEs / Year
More Avg CVEs / Year than 19% of tracked CNAs
7.9
Avg CVSS Score
Higher Avg CVSS Score than 83% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%

Self-Reporting Analysis

Of all the CVEs published by Danfoss as a CNA, 0.0% affect products that Danfoss develops as a vendor.

100.0%
Self-reported: 0Third-party: 3

Of all the CVEs published that affect products developed by Danfoss, 0.0% are self-published by Danfoss as a CNA.

100.0%
Self-published: 0Published by other CNAs: 10

Trends Over Time

The number and severity of CVEs published by Danfoss over time

Volume of CVEsAvg CVSS Base Score
First CVE
May 8, 2025
14 months ago
Most Recent CVE
Aug 22, 2025
336 days ago

Top CVEs

All CVEs published by Danfoss as a CNA, regardless of affected vendor or product.

3 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a pot
Aug 22, 20258.728NONO
Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of servic
Aug 22, 20256.822NONO
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
May 8, 20258.220NONO

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA3 CVEs
Severity distribution among all CVEs352,231 CVEs
MediumHigh
Attack Vector
Local0 (0.0%)
Network3 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High3 (100.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required1 (33.3%)
Privileges Required
Low0 (0.0%)
High2 (66.7%)
None1 (33.3%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (3 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID published by Danfoss as a CNA.

Media Mentions

Media articles that mention a CVE ID published by Danfoss as a CNA — matched by CVE ID, not by organization name.

Top CWEs