Danfoss Refrigeration Controllers Found Vulnerable

Security researchers Team82 discovered multiple vulnerabilities in widely deployed Danfoss AK-SM 800A refrigeration controllers, including a hidden code-of-the-day authentication bypass and remote code execution flaws. The team disclosed these findings to Danfoss, which subsequently addressed the issues in a new firmware version to secure the internet-accessible management interfaces used in supermarkets and warehouses.