Skip to content

CVE

CVE-2025-41451

8.7
CVSS 4.0
1
story
Severity
8.7 High · vendor score
Published
Aug 22, 2025
Weakness
CWE-77
Part of Second Wave of Suspected Cyberattacks Hits European Supermarket Freezers →

What it is

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsSecond Wave of Suspected Cyberattacks Hits European Supermarket FreezersOn November 2, a wave of grocery stores across Belgium, Estonia, Ireland, Luxembourg, the Netherlands, and Sweden started to report issues with their in-store refrigeration and freezer units, due to suspected cyberattacks. LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

2 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record