CVE-2025-41438CWE-1188

Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default

Critical · published May 29, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

🔥 A default account with high-level permissions is lurking on the CS5000 Fire Panel, just waiting for someone to exploit it! Think of it like a security gate with a key left in the lock — anyone can waltz in with access to critical control systems. It's a recipe for disaster, especially when most installations haven't bothered to change that key! If an attacker gains access to this account, they could disrupt the panel’s operations, potentially leading to catastrophic failures in fire safety systems. This could result in a complete loss of functionality when it's needed the most, putting lives and property at serious risk!

Put simply

Think of it like a security gate with a key left in the lock — anyone can waltz in with access to critical control systems. It's a recipe for disaster, especially when most installations haven't bothered to change that key! This vulnerability stems from a default account on the CS5000 Fire Panel that, while not root, possesses high-level privileges, making it a prime target for exploitation if left unaltered.

What to do

If an attacker gains access to this account, they could disrupt the panel’s operations, potentially leading to catastrophic failures in fire safety systems. This could result in a complete loss of functionality when it's needed the most, putting lives and property at serious risk! Immediately change the default account password on all CS5000 Fire Panels to something strong and unique. Additionally, consider implementing further access controls and regularly auditing permissions to safeguard against future vulnerabilities. You've got this! Fixing this vulnerability will enhance your security posture and protect your systems. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00728 · 53.6th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-05-29T23:17Z
EPSS history
Timeline
  • 29 MAY 23:17Z
    Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default
    cvelistv5