CVE-2025-41452

Published on Aug 22, 2025

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions

Weakness type (CWE)CWE-15

Vulnerabilities

Attackers Turn Grocery Refrigeration Systems Into Heaters Across More Than 400 Stores

Attackers remotely altered refrigeration controllers in 400+ European stores, raising temperatures and spoiling stock via third-party access.

Oct 15, 202610:14 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

CVE-2025-41452

Related articles

Attackers Turn Grocery Refrigeration Systems Into Heaters Across More Than 400 Stores

Audience measurement