Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers
Team82 found authentication bypass and remote code execution flaws in Danfoss AK-SM 800A controllers.
Claroty Team82 disclosed flaws in the web management interface of Danfoss AK-SM 800A refrigeration controllers used in supermarkets, cold storage, and warehouses. Researchers found a hidden code-of-the-day authentication bypass, command injection CVE-2025-41451 leading to remote code execution, and authenticated injection of arbitrary Nginx directives that can manipulate traffic or cause denial of service. Censys showed 2,765 exposed interfaces. Danfoss patched the issues in new firmware; the report does not describe in-the-wild exploitation.
76