firmware-reverse-engineering

Claroty Team82 researchers uncovered multiple vulnerabilities in Danfoss AK-SM 800A refrigeration controllers, including a hidden 'code-of-the-day' authentication bypass, a command injection leading to remote code execution (CVE-2025-41451), and Nginx configuration injection. Danfoss has since released fixed firmware following coordinated disclosure.