CVE-2025-41451
EPSS 1.0% (60th percentile).
Vulnerabilities · 4h ago
CERT-FR said numerous Danfoss AK-SM and AK-SC controller compromises hit hundreds of French supermarkets on October 11, with some stores' fridges and freezers forced into defrost and heated to as much as 50°C.
Claroty had already found that the AK-SM 800A platform accepted a hidden daily admin code derived from the current date, which could bypass the configured password and open maintenance access. Because one controller governs a store's refrigeration system, that kind of login can become a store-wide cold-chain failure, not a single-device nuisance.
The reporting does not yet say whether the attackers used those flaws or another entry point, but the incident shows how a contractor-facing remote management path can turn into a physical-disruption channel. Older firmware and end-of-life units carry the clearest exposure if they are still reachable over the network.
EPSS 1.0% (60th percentile).
CVSS 8.2 HIGH: improper Authentication vulnerability in Danfoss AKSM8xxA Series.This issue affects Danfoss AK-SM 8xxA Series prior… EPSS 0.4% (27th percentile).
EPSS 0.3% (17th percentile).
4 sources covering this story
Cyberattack on Connected Fridges in France - Schneier on Security
But the hackers ordered the units to heat up and stay hot, although Danfoss did not confirm any reports about just how warm the fridges and freezers could become in that process.
You don't need a nation state to warm up a fridge | Pen Test Partners
TL;DR Widespread food spoilage across Europe Over the night of the 11th of October 2026, the fridges and freezers in several hundred French supermarkets were made to warm up.
Cyberattacks crank French supermarket refrigeration systems up to 50°C
Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware
Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers
Danfoss controllers at hundreds of French supermarkets were compromised, with attackers forcing defrost and causing food losses at some stores.
Part of the PlainSec briefing for 2026-10-14