An unsupported controller is a funds line, not a patch ticket
Claroty’s Team82 printed three flaws within the present mannequin, the AK-SM 800A, in August, all mounted in firmware 4.3.1 or earlier, and counted 2,765 of its administration interfaces reachable from the web. No person has linked these flaws to the assault. Danfoss says most affected models had been the older AK-SM 800 and AK-SC 355, with some 800A models on outdated firmware.
For the older fashions, there’s nothing to patch. Danfoss ended updates for the AK-SM 800 in Could 2021 and for the AK-SC 355 in 2016. CERT-FR subsequently doesn’t lead with patching. It tells operators to take each AK-SM, AK-SC and XWEB controller off the general public web, restore entry solely by means of a VPN or protected community, and for compromised Danfoss models, restart, or failing that, factory-reset, and reconfigure earlier than returning them to service. It provides a warning that reads like a prediction: a reset alone removes persistence however leaves the machine simply as weak, and the marketing campaign might be nonetheless working.
The sequence is the one I argued for when CISA requested operators to harden Siemens S7 PLCs: publicity first, firmware second, substitute third. In follow, meaning a listing of each refrigeration controller by mannequin, firmware and vendor assist standing by the tip of this week; a administration interface on a public IP handle taken off it the identical day; present firmware on all the things the seller nonetheless helps; and for all the things it doesn’t, a substitute date with a funds line and a reputation subsequent to it. An getting older controller should do its job completely properly, and changing it prices cash, engineering time and downtime, so with out an proprietor the choice slides. The safety crew can doc the danger. Somebody on the business facet has to simply accept it or fund the substitute, and after Reuters’ insurance coverage round-up, that individual ought to know they’re additionally accepting the inventory.
