Two critical vulnerabilities in a food-quality management software package would allow adversaries to completely compromise the system. The issues affect the AK-EM 800 product from SCADA vendor Danfoss. The software is an enterprise management solution for the food retail industry. One of the flaws is a poorly authenticated backdoor tool, likely originally created to help the vendor s support team log into systems to assist their clients. The other critical vulnerability arises from missing permission checks when accessing a servlet that allows sensitive database queries to be performed.
Source: https://threatpost.com/critical-bugs-food-safety-remote-attacks/148009/

