What is GHSA-r7mx-84m9-9h4q?

GHSA-r7mx-84m9-9h4q is a security advisory published by GitHub Security Advisories with High severity. Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (...

Which CVE IDs does GHSA-r7mx-84m9-9h4q cover?

GHSA-r7mx-84m9-9h4q covers the following CVE IDs: CVE-2025-41451. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-r7mx-84m9-9h4qHigh

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command (...

Vendor

GitHub Security Advisories

Published

August 22, 2025

Last Modified

October 19, 2026

🔗 CVE IDs covered (1)

CVE-2025-41451 →

📋 Description

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command ('Command Injection') in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-41451
https://www.danfoss.com/en/service-and-support/downloads/dcs/adap-kool-software/ak-sm-800a/#tab-overview
https://github.com/msuiche/fromagegate
https://github.com/advisories/GHSA-r7mx-84m9-9h4q