Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Webreport disclosure to unauthorized actor in Danfoss AK-EM100
Vulnerability Description
The webreport generation feature in the Danfoss AK-EM100 allows an unauthorized actor to generate a web report that discloses sensitive information such as the internal IP address, usernames and internal device values.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
Danfoss AK-EM100 web applications 信息泄露漏洞
Vulnerability Description
Danfoss AK-EM100 web applications是丹麦Danfoss公司的一个 web 应用程序。提供了商店的基于 web 的图形用户界面，该界面允许一系列日常用户本地或远程监控关于他们所有制冷设备的数据、警报和报告。 Danfoss AK-EM100 web applications存在信息泄露漏洞，该漏洞源于允许未经授权的行为者生成网络报告，披露敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A