

https://cyberplace.social/@GossiTheDog/117429502412235079
https://ironhackers.es/en/danfoss-ak-sm-800a-cve-2025-41450/
The “code of the day”
Many industrial devices include a service access so the vendor’s technician can get in without the customer’s password. A classic —and dangerous— way to implement it is the code of the day: a code that changes every day according to a formula that, in theory, only the vendor knows.
The problem shows up when that “secret formula” is the only thing protecting access (security by obscurity) and it can also be recovered from the firmware itself. That is exactly what happens here: sm_app ships unobfuscated, with function and variable names in plain sight. The one that validates the code is called, literally, check_code_of_day.




I don’t think it’s going to work out for him this time, but I’ve been wrong before