Improper Access Control in Danfoss iC7-Automation and Marine Products

CVE-2026-15203

What is CVE-2026-15203?

An improper access control vulnerability exists in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 that allows attackers to exploit debug and engineering interfaces. This can lead to unauthorized read/write access to internal system values, enabling the upload and execution of unsigned applications, as well as the potential for uploading unsigned EEPROM data and firmware through exposed service interfaces and software update processes. Organizations using these products should review their configuration and implement security patches to mitigate these risks.

References