Danfoss fridge controllers ship with six unpatched RCE holes, and patching won't save you
Multiple remote code execution vulnerabilities in danfoss sm-800A
After French supermarket attacks, researchers spent just one hour manually probing the latest Danfoss AK-SM800A firmware (5.3.2) and found six pre-authentication stack-based buffer overflows. The code is riddled with strcpy calls, lacks stack canaries and PIE, and the main app runs as root. The author argues that patching alone is a trap: defenders should restrict network exposure via VPNs or strict IP whitelists instead of trusting Danfoss's security advisories.
Asset owners, system integrators, and those responsible for procurement should realize exactly how little such certifications can say about the actual security posture of a product.
- trebligdivad
A previous discussion mentioned that many used mobile comms rather than the stores own connectivity; if so then I have seen some providers do SIMs that terminate in VPNs, so without any software changes on the devices they could be isolated.
- polishdude20
How is it that this page is getting cut off on mobile? I can't even scroll to the side to see the rest of the words.
- holsta
Shodan now says 7,667 StoreView devices, up from 4500 around mid-October.
Some of those may be honeypots, but not all of them.