You could connect to an on-premise server. As a bonus, the manufacturer cannot disable them and extort money in this case.
replyThey most likely are. Third party techs then access them over Citrix or VPN/RDP. There could be some cloud portion that aggregates data or pushes policies and schedules as well.
replyIf the only usecase is monitoring, then why make the fridges anything else but report-only?
replyNo firmware updates. no admin configuration. no ssh backdoors. just a transmit-only system
because the report code might have bugs
replyIf it were transmit only, you could put it behind a data diode and buggy report code wouldn't matter. Even better, validating the code is a lot easier if it doesn't accept attacker input.
replyMonitoring requires one-way announcements, not bi-directional connections
reply