Thousands of refrigeration control panels accessible over the internet could face the risk of unauthorised access and cyberattacks because of inadequate security measures, according to Vladimir Dashchenko, Principal Security Researcher at Kaspersky.
Dashchenko warned that modern refrigeration systems, like other industrial devices, increasingly rely on digital technologies that allow operators to monitor and control equipment remotely. However, inadequate cybersecurity safeguards could expose these systems to exploitation by malicious actors.
He explained that some manufacturers fail to implement fundamental security measures, including strong password policies, two-factor authentication and other standard controls. Weaknesses in secure software development practices and Security Software Development Life Cycle (SSDLC) processes further increase the potential risks.
“Modern refrigeration systems are a typical example of cyber-physical systems. It means they can be monitored and controlled remotely, while their level of security often remains insufficient,” Dashchenko said.
According to the cybersecurity expert, another major concern is that some industrial control systems are connected directly to the internet instead of being properly isolated from public networks.
Search engines such as Shodan and Censys, which index internet-connected devices, can identify refrigeration control panels that are publicly accessible. This means that devices with weak security configurations could be discovered not only by legitimate administrators but also by cybercriminals searching for vulnerable systems.
Figures cited by Dashchenko indicate that Shodan identifies more than 4,500 refrigeration control devices accessible online, while Censys lists approximately 4,300.
He noted that the problem extends beyond refrigeration equipment to include solar power control systems and other industrial devices that can also be found exposed to the internet.
Such exposure, he warned, increases the risk of unauthorised access, exploitation of known vulnerabilities and interference with the normal operation of industrial equipment.
Vulnerabilities Could Enable Remote Attacks
Dashchenko further noted that information about methods for achieving remote arbitrary code execution on similar refrigeration control panels had previously entered the public domain.
Remote arbitrary code execution is a serious cybersecurity vulnerability that can allow an attacker to execute commands or run malicious code on a targeted device, potentially compromising its operations.
The risk could be compounded by inadequate mechanisms for ensuring that critical software updates are installed promptly. Where manufacturers cannot enforce or adequately manage essential security updates, vulnerable devices may remain exposed even after fixes become available.
This creates a potential pathway for cyberattacks, particularly when internet-accessible equipment combines known software vulnerabilities with weak authentication and poor security configurations.
Manufacturers and Buyers Urged to Strengthen Security
To address the risks, Dashchenko urged manufacturers to incorporate cybersecurity requirements from the earliest stages of product design and development rather than treating security as an afterthought.
He recommended avoiding direct internet exposure wherever possible, implementing strong authentication mechanisms and ensuring that critical security updates are installed promptly.
Organisations purchasing refrigeration systems and other industrial control equipment were also advised to assess vendors’ cybersecurity practices before making procurement decisions.
These assessments should include how manufacturers manage software patches, address newly discovered vulnerabilities and protect remote access to their products.
The warning highlights the growing importance of cybersecurity in industrial environments as equipment becomes increasingly connected and remotely managed. While internet connectivity can improve monitoring, maintenance and operational efficiency, inadequate safeguards can also create entry points for attacks.
Dashchenko's comments underscore the need for manufacturers, equipment buyers and operators to adopt stronger security practices to reduce the risk of unauthorised access and help protect the reliable operation of connected industrial systems.