CVE-2025-41451
?
unscored · CVSS · EPSS 4.5% (pctl 92)
In your normal cycle
No KEV, no public exploit, low EPSS.
Description
Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.
Scoring
| CVSS | unscored |
|---|---|
| EPSS | 4.46% — more likely to be exploited than 92% of all CVEs |
| Weakness | CWE-77 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2025-08-22 |
| Last modified | 2026-10-19 |
References
→ the Explorer · watch your stack · NVD