@mjg59 are they being actively cracked into or is it a "standard" case of default or bad credentials to an unprotected management interface? I do not follow technical news but from the generalist press news it seemed the latter.
Nov 4, 2026, 8:46 AM@palin The credentials rotated every day according to a predictable algorithm, so there's some degree of active cracking
@palin @mjg59 There's details of the vulnerability here: https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers
If you set an additional parameter on the web interface login form, you could log in with a password derived from the current day, irrespective of how the owner had configured the device. It's essentially a back door created by the manufacturer, presumably intended for use by their support technicians.
Nov 4, 2026, 9:22 AM@palin @mjg59 I guess it depends on how you define "OS". It's software that is preinstalled on the device, is central to the functionality of the device, and is upgraded as part of the firmware.
So while it isn't a kernel vulnerability, I'd probably still class it as an operating system vulnerability for the device.
Nov 4, 2026, 11:45 AM