peter bassill · operator
$ cve CVE-2025-41452 JSON

CVE-2025-41452

?
unscored · CVSS · EPSS 0.9% (pctl 61)

In your normal cycle

No KEV, no public exploit, low EPSS.

Description

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

Scoring

CVSSunscored
EPSS0.93% — more likely to be exploited than 61% of all CVEs
WeaknessCWE-15
On CISA KEVno
Public exploitnone known
Published2025-08-22
Last modified2026-10-19

References

→ the Explorer  ·  watch your stack  ·  NVD