@palin @mjg59 There's details of the vulnerability here: https://claroty.com/team82/research/freeze-the-controller-defrost-the-food-uncovering-vulnerabilities-in-danfoss-refrigeration-controllers

If you set an additional parameter on the web interface login form, you could log in with a password derived from the current day, irrespective of how the owner had configured the device. It's essentially a back door created by the manufacturer, presumably intended for use by their support technicians.