It's not just France - anyone with Danfoss could have their cold storage "cooked" overnight like this. A vulnerability in the Danfoss platform was documented on August 9th by Team 82:
Danfoss AK-SM 800A controllers are widely deployed to manage refrigeration infrastructure in supermarkets, cold-storage facilities, warehouses, and other commercial environments. Because these systems provide centralized management of refrigeration equipment, compromising the management interface can have significant operational consequences.
Team82 researched the attack surface of the Danfoss AK-SM 800A platform and identified multiple vulnerabilities affecting the embedded web management interface.
Our research uncovered a hidden "code-of-the-day" authentication mechanism that could be abused to bypass normal authentication, a command-injection vulnerability leading to remote code execution, and an issue allowing authenticated users to inject arbitrary Nginx configuration directives, which could be leveraged to manipulate web traffic and trigger a denial-of-service condition.
Our analysis began by examining the internet exposure of these devices, where we identified thousands of publicly accessible management interfaces.
- via https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
[video]
Post #3507
8K
- 🤬 34
- 🔥 19
- 👍 8
- ❤ 7