France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack
Censys observed a 71% drop in internet-exposed Danfoss StoreView controllers in France within three days of the October 11 cyber-attack on hundreds of supermarkets. Operators took devices offline instead of patching, though CVE-2025-41450/41451/41452 allowed remote code execution to disable cooling and falsify temperature readings.
- Internet-exposed StoreView instances in France fell from 1825 to 537 in three days
- Danfoss confirmed its AK-SM800, AK-SC355 and AK-SM800A controllers were targeted
- Patches for three vulnerabilities shipped in March and August 2025
- 74% of exposed French StoreView instances ran unpatched versions
Read next
Security