EUVD-2026-66251
GHSA-m45v-v2rr-g2hr
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated low-complexity access to service interfaces (PR:N/AC:L) yields full read/write and unsigned firmware execution (C/I/A:H); scope changed (S:C) as impact extends beyond the debug component to the controlled drive.
Primary rating from Vendor (Danfoss).
CVSS VectorVendor: Danfoss
Lifecycle Timeline
2DescriptionCVE.org
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
AnalysisAI
Improper access control on the debug and engineering interfaces of Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 drive platforms lets attackers read and write internal device values and, more critically, upload and execute unsigned applications, EEPROM data, and firmware through exposed service and software-update mechanisms. Rated CVSS 4.0 9.3, the flaw effectively bypasses code-signing and grants full control over affected industrial drive controllers. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network or service-network reachability to the exposed debug/engineering service interfaces and software-update mechanism of an iC7-Automation SP, iC7-Marine, or iC7-Hybrid GR3 drive; per the CVSS vector (PR:N/UI:N/AC:L) no authentication, no user interaction, and no elevated privileges are needed once that interface is reachable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) describes a network-reachable, low-complexity, unauthenticated attack with high impact to confidentiality, integrity, and availability of the drive and low impact to subsequent systems - a genuine critical-severity profile at 9.3. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the vendor-supplied software/firmware updates: Patch available per vendor advisory (Danfoss), distributed as the three downloads at https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip, https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip, and https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip - match the correct package to each iC7 variant (Automation SP, Marine, Hybrid GR3). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Danfoss iC7 drive platforms in your environment and cross-reference firmware versions against the vendor advisory; prioritize isolation of any systems unable to patch within 7 days. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today