Osegi
Security·1 min read

Danfoss AK-SM 800A flaws: supermarket fridge controllers still open

Danfoss AK-SM 800A refrigeration controllers, flagged as vulnerable since August, apparently still had critical security holes after the updates.

Rows of refrigerated display cases in a supermarket, whose cooling is managed by networked controllers.
Image: Security
SUMODialoediviewergiftdetect

The fix did not fix everything. The Danfoss AK-SM 800A, a controller that runs refrigeration equipment, has been considered vulnerable since August. Now it appears the devices contained further critical security flaws, so they stayed open to attack even after updates.

The title of the story points to attacks on supermarkets, which is where this kind of cooling control is used. Beyond that, the details are thin. What we can say is that the AK-SM 800A is the device in question, that it has been regarded as vulnerable since August, and that the additional holes are described as critical.

What is the Danfoss AK-SM 800A?

It is a control unit from the manufacturer Danfoss for refrigeration systems. Controllers like this sit between the cooling hardware and the people who manage it, which is exactly why a flaw in them matters: whoever gets in can reach equipment that is supposed to keep food cold.

Are the updates enough?

Based on the current reports, not necessarily. Updates were released after the August warnings, yet the newly found flaws mean that patched devices were apparently still attackable. Operators who assumed the problem was closed may need to check again.

It is not yet clear from the available information which updates close the new gaps or how many devices are affected.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:danfossak-sm 800avulnerabilitysupermarketindustrial control

More from this day

See all →

More in: Security

See all →