Attackers Heat French Supermarket Fridges Up to 50°C by Hijacking Danfoss Controllers

Attackers remotely hijacked Danfoss AK-SM and AK-SC series refrigeration controllers used in French supermarkets, raising fridge temperatures to as high as 50°C and causing significant food spoilage. The attack affected hundreds of stores across major retail chains including Intermarché, Carrefour, and Monoprix. CERT-FR issued an alert urging operators to disconnect or tightly filter access to these controllers, which are often exposed to the internet. While no specific vulnerability or intrusion method was confirmed, older unsupported models (AK-SM 800, AK-SC 355) were primarily targeted, and Danfoss had previously disclosed CVEs in newer models that could allow authentication bypass and remote code execution.

AI-extracted · verify before operational use