This is a great find, would be nice for it to be mentioned in the original article. It all worked out just like the title says. I guess someone didn't upgrade their firmware in time.

▲

yorwba 6 hours ago | parent [-]

The security advisory linked in that article was published in August 2025. Apparently it took about a year to finish the writeup. Unless the supermarket also spent about a year without upgrading the firmware, it might be a newer vulnerability.

	▲	renyicircle 5 hours ago \| parent [-]
		Thanks for pointing this out, I hadn't noticed that. I'd expect a large customer to be persuaded by Danfoss to upgrade within a year, especially before publishing the details of the vulnerability, so you're probably right.