EU Grocers Pay a Steep Price for Unpatched Fridge Firmware
Hackers exploited unpatched Danfoss fridge controllers, spoiling food at more than 400 European grocery stores.
82
CVE-2025-41450
- CVSS 3.1
- 8.2 high
- EPSS
- <1%p26
- Published
- ·
- Modified
Description · NVD
Improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior to version 4.2
- Weakness
- CWE-305
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:H
In the news
4 storiesCyberattack shuts down refrigerators at French supermarkets
Attackers remotely defrosted refrigerators at 250–350 French supermarkets via Danfoss controllers.
82
Major French Supermarket Chains Hit by Cyber-Attack, Food Stock Impacted
Cyberattack on Danfoss refrigeration software hit French supermarket chains, triggering forced defrosts and spoiling food stock.
80
France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
French internet-exposed Danfoss StoreView controllers fell 71 percent within three days after a supermarket cyber-attack.
74