← Back to context

Comment by renyicircle

7 hours ago

This is a great find, would be nice for it to be mentioned in the original article. It all worked out just like the title says. I guess someone didn't upgrade their firmware in time.

2 comments

renyicircle

Reply
yorwba  5 hours ago

The security advisory linked in that article was published in August 2025. Apparently it took about a year to finish the writeup. Unless the supermarket also spent about a year without upgrading the firmware, it might be a newer vulnerability.

  • renyicircle  4 hours ago

    Thanks for pointing this out, I hadn't noticed that. I'd expect a large customer to be persuaded by Danfoss to upgrade within a year, especially before publishing the details of the vulnerability, so you're probably right.