Skip to content
Vulnerabilities Found in Danfoss Refrigeration Controllers

Vulnerabilities Found in Danfoss Refrigeration Controllers

First seen 12 Oct 2026, 14:31 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 14:31 UTC
  • •Multiple vulnerabilities found in Danfoss AK-SM 800A controllers.
  • •Vulnerabilities include remote code execution and command injection flaws.
  • •Danfoss has released a firmware update to address these issues.

Team82 identified multiple vulnerabilities in the Danfoss AK-SM 800A refrigeration controllers, which are widely used in supermarkets and cold-storage facilities. The vulnerabilities include a hidden 'code-of-the-day' authentication mechanism, a command-injection flaw leading to remote code execution, and an issue allowing arbitrary Nginx configuration directive injection. Thousands of these devices were found to have publicly accessible management interfaces. Danfoss has since addressed these vulnerabilities in a new firmware version. The vulnerabilities were disclosed on October 12, 2026, and are significant due to the potential operational impact on refrigeration management systems. The research highlights the risks associated with undocumented functionalities and insecure command constructions.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2025-05-08
CVE-2025-41450 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-08-22
CVE-2025-41452 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2025-08-22
CVE-2025-41451 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-12
Vulnerabilities disclosed
Team82 reported multiple vulnerabilities in Danfoss AK-SM 800A controllers affecting their web management interface.
claroty.com

More articles in this cluster (2)

Following this threat?

Track Danfoss and CVE-2025-41450 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (15)

1 / 4

Common questions

What vulnerabilities were found?
The vulnerabilities include a hidden authentication mechanism, command injection, and arbitrary configuration directive injection.
How many devices are affected?
Thousands of Danfoss AK-SM 800A controllers were found to have publicly accessible management interfaces.
What should be done now?
Users should update to the latest firmware version released by Danfoss to mitigate these vulnerabilities.