CVE-2026-15203 (GCVE-0-2026-15203)
Vulnerability from cvelistv5 – Published: 2026-08-26 05:36 – Updated: 2026-08-26 14:58
VLAI
EPSS
VEX
Title
Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
Summary
Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-08-26 14:55 UTC
CWE
- CWE-1191 - On-Chip debug and test interface with improper access control
Assigner
References
3 references
Impacted products
3 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Danfoss | iC7-Automation SP |
Affected:
0 , ≤ 2025.3.3
(custom)
|
guessed | |
| Danfoss | iC7-Marine |
Affected:
0 , ≤ 2025.8.19
(custom)
|
guessed | |
| Danfoss | iC7-Hybrid |
Affected:
0 , ≤ 2025.10.300845
(custom)
|
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-15203",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-26T14:55:58.163499Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T14:58:01.137Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "iC7-Automation SP",
"vendor": "Danfoss",
"versions": [
{
"lessThanOrEqual": "2025.3.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iC7-Marine",
"vendor": "Danfoss",
"versions": [
{
"lessThanOrEqual": "2025.8.19",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "iC7-Hybrid",
"vendor": "Danfoss",
"versions": [
{
"lessThanOrEqual": "2025.10.300845",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cdiv\u003eImproper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e"
}
],
"value": "Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms"
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "LOW",
"subConfidentialityImpact": "LOW",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-1191",
"description": "CWE-1191 On-Chip debug and test interface with improper access control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-26T05:36:02.006Z",
"orgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
"shortName": "Danfoss"
},
"references": [
{
"tags": [
"patch"
],
"url": "https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip"
},
{
"tags": [
"patch"
],
"url": "https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip"
},
{
"tags": [
"patch"
],
"url": "https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003e\u003cul\u003e\u003cli\u003eiC7-Automation SP:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\" title=\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\"\u003ehttps://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.2.5-26A)\u003c/li\u003e\u003cli\u003eiC7-Marine:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\" title=\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\"\u003ehttps://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.6.30-GR4.4)\u003c/li\u003e\u003cli\u003eiC7-Hybrid:\u0026nbsp;\u003ca href=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\" title=\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\"\u003ehttps://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.7.2-GR4.5)\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
}
],
"value": "* iC7-Automation SP:\u00a0 https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip \u00a0(Release\u00a02026.2.5-26A)\n * iC7-Marine:\u00a0 https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip \u00a0(Release\u00a02026.6.30-GR4.4)\n * iC7-Hybrid:\u00a0 https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip \u00a0(Release\u00a02026.7.2-GR4.5)"
}
],
"source": {
"discovery": "INTERNAL"
},
"title": "Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "d7ff35af-cf88-454c-bab9-af60602f10f8",
"assignerShortName": "Danfoss",
"cveId": "CVE-2026-15203",
"datePublished": "2026-08-26T05:36:02.006Z",
"dateReserved": "2026-07-09T06:41:49.174Z",
"dateUpdated": "2026-08-26T14:58:01.137Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-15203",
"date": "2026-08-27",
"epss": "0.00361",
"percentile": "0.28889"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-15203\",\"sourceIdentifier\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\",\"published\":\"2026-08-26T06:16:25.130\",\"lastModified\":\"2026-08-26T15:16:43.550\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\"}],\"affected\":[{\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\",\"affectedData\":[{\"vendor\":\"Danfoss\",\"product\":\"iC7-Automation SP\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2025.3.3\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Danfoss\",\"product\":\"iC7-Marine\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2025.8.19\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Danfoss\",\"product\":\"iC7-Hybrid\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2025.10.300845\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":9.3,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"subAvailabilityImpact\":\"LOW\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-08-26T14:55:58.163499Z\",\"id\":\"CVE-2026-15203\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-1191\"}]}],\"references\":[{\"url\":\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\",\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\"},{\"url\":\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\",\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\"},{\"url\":\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\",\"source\":\"d7ff35af-cf88-454c-bab9-af60602f10f8\"}]}}",
"vulnrichment": {
"containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"d7ff35af-cf88-454c-bab9-af60602f10f8\", \"shortName\": \"Danfoss\", \"dateUpdated\": \"2026-08-26T05:36:02.006Z\"}, \"title\": \"Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software\", \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"cweId\": \"CWE-1191\", \"description\": \"CWE-1191 On-Chip debug and test interface with improper access control\", \"type\": \"CWE\"}]}], \"affected\": [{\"vendor\": \"Danfoss\", \"product\": \"iC7-Automation SP\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThanOrEqual\": \"2025.3.3\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Danfoss\", \"product\": \"iC7-Marine\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThanOrEqual\": \"2025.8.19\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Danfoss\", \"product\": \"iC7-Hybrid\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThanOrEqual\": \"2025.10.300845\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cdiv\u003e\u003cdiv\u003eImproper access control in debug and engineering interfaces in Danfoss iC7-Automation SP, iC7-Marine, and iC7-Hybrid GR3 allows attackers to gain read/write access to internal values, upload and execute unsigned applications, and upload unsigned EEPROM data and firmware via exposed service interfaces and software update mechanisms\u003cbr\u003e\u003c/div\u003e\u003c/div\u003e\"}]}], \"references\": [{\"url\": \"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\", \"tags\": [\"patch\"]}, {\"url\": \"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\", \"tags\": [\"patch\"]}, {\"url\": \"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\", \"tags\": [\"patch\"]}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV4_0\": {\"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"LOW\", \"vulnIntegrityImpact\": \"HIGH\", \"subIntegrityImpact\": \"LOW\", \"vulnAvailabilityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"LOW\", \"exploitMaturity\": \"NOT_DEFINED\", \"Safety\": \"NOT_DEFINED\", \"Automatable\": \"NOT_DEFINED\", \"Recovery\": \"NOT_DEFINED\", \"valueDensity\": \"NOT_DEFINED\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"version\": \"4.0\", \"baseSeverity\": \"CRITICAL\", \"baseScore\": 9.3, \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L\"}}], \"solutions\": [{\"lang\": \"en\", \"value\": \"* iC7-Automation SP:\\u00a0 https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip \\u00a0(Release\\u00a02026.2.5-26A)\\n * iC7-Marine:\\u00a0 https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip \\u00a0(Release\\u00a02026.6.30-GR4.4)\\n * iC7-Hybrid:\\u00a0 https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip \\u00a0(Release\\u00a02026.7.2-GR4.5)\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cdiv\u003e\u003cul\u003e\u003cli\u003eiC7-Automation SP:\u0026nbsp;\u003ca href=\\\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\\\" title=\\\"https://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\\\"\u003ehttps://assets.danfoss.com/software/latest/572932/ID543724747716-0201.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.2.5-26A)\u003c/li\u003e\u003cli\u003eiC7-Marine:\u0026nbsp;\u003ca href=\\\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\\\" title=\\\"https://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\\\"\u003ehttps://assets.danfoss.com/software/latest/595833/ID506542766960-0501.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.6.30-GR4.4)\u003c/li\u003e\u003cli\u003eiC7-Hybrid:\u0026nbsp;\u003ca href=\\\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\\\" title=\\\"https://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\\\"\u003ehttps://assets.danfoss.com/software/latest/595835/ID506543688961-0601.zip\u003c/a\u003e\u0026nbsp;(Release\u0026nbsp;2026.7.2-GR4.5)\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e\"}]}], \"source\": {\"discovery\": \"INTERNAL\"}, \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-15203\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-08-26T14:55:58.163499Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-08-26T14:57:57.269Z\"}}]}",
"cveMetadata": "{\"cveId\": \"CVE-2026-15203\", \"assignerOrgId\": \"d7ff35af-cf88-454c-bab9-af60602f10f8\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"Danfoss\", \"dateReserved\": \"2026-07-09T06:41:49.174Z\", \"datePublished\": \"2026-08-26T05:36:02.006Z\", \"dateUpdated\": \"2026-08-26T14:58:01.137Z\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…