Multiple remote code execution vulnerabilities in danfoss sm-800A
Summary
The Midnight Blue blog analyzes multiple pre-authentication remote code execution vulnerabilities in the Danfoss AK-SM800A refrigeration controllers, highlighting trivial memory corruption flaws (e.g., strcpy usage) and weak defenses (no stack canaries, no PIE). It emphasizes the risks of internet exposure for OT devices, coordinated disclosure with the vendor, and practical mitigations like VPNs and strict session controls, while cautioning against relying solely on patches or certifications.