As cited
Copy frozen at (site build).
vulnerabilities
Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk
Claroty Team82 reproduced three disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers using artificial intelligence (AI) coding agents, chaining two vulnerabilities to achieve root access in approximately 28 minutes at a cost of around US$6. The experiment relied on publicly available firmware, CVE identifiers, and reverse-engineering tools, with researcher intervention required to correct the AI agent's initial errors on one authentication bypass. Searches on Censys and Shodan identified thousands of potentially exposed internet-facing devices, demonstrating the expanding attack surface for industrial refrigeration systems.
Why it matters: Organizations operating Danfoss refrigeration controllers and other operational technology systems face accelerated exploit reproduction timelines; the combination of low-cost AI tools, public vulnerability disclosures, accessible firmware, and internet-exposed equipment means attackers can now move from disclosure to working exploit within hours rather than weeks.
- Source published
- First seen by Cybersecurity Tracker