Serious Vulnerabilities Found in Refrigeration Controllers Used in Supermarkets

• •14 serious vulnerabilities found in Copeland's Dixell refrigeration units, with some actively exploited.
• •Danfoss controllers remain vulnerable despite updates, with new flaws allowing remote code execution.
• •Authorities urge immediate action to secure affected refrigeration systems from potential attacks.

Cybersecurity researchers have identified multiple vulnerabilities in refrigeration controllers from Copeland and Danfoss, affecting systems used in supermarkets and other facilities. Copeland's Dixell refrigeration units have 14 vulnerabilities, some with severity scores up to 9.8, and at least two are under active exploitation. Meanwhile, Danfoss controllers reportedly remain vulnerable even after recent updates, with new flaws allowing pre-authentication remote code execution. Germany's Federal Office for Information Security (BSI) has issued warnings urging immediate action from users. Both manufacturers recommend keeping devices off the public internet and applying the latest patches. The vulnerabilities pose significant risks to the operational integrity of affected systems, with potential for malicious firmware installation. Researchers emphasize the importance of disconnecting these devices from the internet to mitigate risks.