France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
French internet-exposed Danfoss StoreView controllers fell 71 percent within three days after a supermarket cyber-attack.
After an October 11 cyber-attack on supermarket refrigeration in France, Censys saw internet-exposed Danfoss StoreView controllers in France fall 71 percent in three days, from 1,825 of 2,991 worldwide hosts on October 11 to 537 on October 14. Danfoss confirmed its equipment was targeted, mainly unsupported AK-SM800 and AK-SC355 models or AK-SM800A units on outdated firmware, but did not confirm the initial access vector. Censys said patched releases (4.3.1 and later, fixing CVE-2025-41450, CVE-2025-41451, and CVE-2025-41452) did not grow, indicating operators removed devices from the internet instead of patching. Claroty previously chained CVE-2025-41450 and CVE-2025-41451 for remote code execution that could disable cooling and falsify temperatures.