Vulnerability Description
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
Related Weaknesses (CWE)
References
- https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip
- https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip
- https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip
FAQ
What is CVE-2026-15203?
CVE-2026-15203 is a documented vulnerability. Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execu...
How severe is CVE-2026-15203?
CVSS scoring is not yet available for CVE-2026-15203. Check NVD for updates.
Is there a patch for CVE-2026-15203?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.