%20(1)%20(1).webp "Severe Vulnerabilities in Consilium CS5000 Fire Panels Allow Remote System Takeover")
Two critical cybersecurity vulnerabilities have been discovered in the Consilium Safety CS5000 Fire Panel, affecting its default accounts and embedded VNC credentials, which could allow remote attackers to gain control or disable fire safety systems. The vulnerabilities highlight the challenges of securing legacy industrial control systems without vendor patches, emphasizing the importance of system upgrades and robust network controls. #CVE-2025-41438 #CVE-2025-46352 #CS5000FirePanel
Keypoints
- Two high-severity vulnerabilities affect the Consilium Safety CS5000 Fire Panel, a widely used safety system.
- The first vulnerability involves a default high-privilege account that remains unchanged in most installations.
- The second vulnerability is a hard-coded VNC password embedded in the device’s binary, granting unauthorized remote access.
- Vendor recommends upgrading to newer fire panels as no patches are planned for the legacy devices.
- Organizations are advised to isolate, segment, and monitor these panels to mitigate exploitation risks.
Read More: https://gbhackers.com/vulnerabilities-in-consilium-cs5000/