SQL Injection in Danfoss AK-EM100
CVE-2023-22583

10CRITICAL

Key Information:

Vendor

Danfoss

Status
Ak-em100
Vendor
CVE Published:
11 June 2023

What is CVE-2023-22583?

The Danfoss AK-EM100 web forms are vulnerable to SQL injection attacks, compromising the security of login forms. This vulnerability allows attackers to manipulate database queries, potentially exposing sensitive user data and impacting the integrity of the application. It is crucial for users of the AK-EM100 to assess their systems for this vulnerability and implement appropriate security measures to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

AK-EM100 < 2.2.0.12

References

https://csirt.divd.nl/CVE-2023-22583/
third-party-advisory
https://csirt.divd.nl/DIVD-2023-00021/
third-party-advisory

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jony Schats (Hackdefense)
Stan Plasmeijer (Hackdefense)
Max van der Horst (DIVD)
JSON
.