They most likely are. Third party techs then access them over Citrix or VPN/RDP. There could be some cloud portion that aggregates data or pushes policies and schedules as well.
replyIf the only usecase is monitoring, then why make the fridges anything else but report-only?
replyNo firmware updates. no admin configuration. no ssh backdoors. just a transmit-only system
because the report code might have bugs
replyIf it were transmit only, you could put it behind a data diode and buggy report code wouldn't matter. Even better, validating the code is a lot easier if it doesn't accept attacker input.
reply