CVE-2025-41451

Name of the Vulnerable Software and Affected Versions: Danfoss AK-SM8xxA Series versions prior to 4.3.1

Description: Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') exists in the software, potentially leading to post-authenticated remote code execution on an attacked system. The vulnerability resides in the handling of configuration fields used for alarm-to-mail functionality. A 'Command Injection' occurs when an attacker can insert arbitrary commands into a system's shell through manipulated input.

Recommendations: Update Danfoss AK-SM8xxA Series to version 4.3.1 or later.