Danfoss Fridges Exposed to Remote Code Execution

Since October 11th, cyber attacks hit Danfoss and Copeland internet-exposed fridge controllers across Europe, causing tens of millions of euros in spoilt food damages and fires. Researchers found six pre-authentication remote code execution 0-day vulnerabilities in the Danfoss AK-SM800A firmware version 5.3.2 within an hour.