Medium Check your exposure
AI tool rebuilt attacks on Danfoss refrigeration controllers in 28 minutes
Industrial CyberDanfoss, Claroty Team82CVE-2025-41451, CVE-2025-41452, CVE-2025-41450
What happened. Claroty's Team82 used an AI coding agent to reproduce three known flaws in Danfoss AK-SM 800A refrigeration controllers. Chaining two gave root-level command execution on a lab device in about 28 minutes, at a cost of about US$6.
Who is affected. Danfoss AK-SM 800A refrigeration controllers. The source does not say which organisations are affected.
What to do. Check whether you run Danfoss AK-SM 800A controllers and whether they are reachable from the internet. Restrict that access.
Source: Industrial Cyber (opens industrialcyber.co)
More on Danfoss CVE-2025-41450 CVE-2025-41451 CVE-2025-41452