Multiple remote code execution vulnerabilities in danfoss sm-800A

Since October 11th, cyber attacks have targeted internet-exposed refrigeration controllers from Danfoss and Copeland across Europe, causing tens of millions of euros in food spoilage damages and fires by triggering defrosting operations. Midnight Blue researchers discovered multiple pre-authentication remote code execution vulnerabilities in the Danfoss AK-SM 800A that are trivial to exploit, joining previously documented flaws from other security firms. The researchers recommend asset owners prioritize removing internet exposure through VPNs or IP whitelisting rather than relying solely on patching, as hundreds of vulnerable systems remain online.