CVE-2025-41438: Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default
The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's operation if exploited.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41438?
The severity of CVE-2025-41438 is considered high due to the presence of a default account with elevated permissions.
How do I fix CVE-2025-41438?
To fix CVE-2025-41438, you must SSH into the CS5000 Fire Panel and change the default account password.
What impact does CVE-2025-41438 have on the CS5000 Fire Panel?
CVE-2025-41438 allows unauthorized access to high-level permissions, potentially compromising the security of the fire panel.
Is CVE-2025-41438 commonly exploited?
While there are no specific reports of CVE-2025-41438 being actively exploited, the presence of a default account poses a significant security risk.
Who is affected by CVE-2025-41438?
All installations of the Consilium Safety CS5000 Fire Panel that have not changed the default account settings are affected by CVE-2025-41438.