We all know the saying: The S in IoT stands for secure.

A quick search puts the list price of the touchscreen-equipped controller at around €7,000 [1]. So this is hardly the typical dirt-cheap IoT device you can buy for a few bucks from China. The product label also says "Made in Denmark."

This vulnerability certainly appears more complex to exploit than the ones routinely found in cheap IoT devices.

Still, I wonder why, in the age of Tailscale and Nebula, a large company like Danfoss doesn’t use overlay networks to make these services accessible only to technicians and other authorized personnel, rather than exposing them publicly. From a technical standpoint, a company with 40,000 employees should be capable to pull this off.

[1] https://www.lefroid.fr/fr/c/p/402785

This is a great find, would be nice for it to be mentioned in the original article. It all worked out just like the title says. I guess someone didn't upgrade their firmware in time.