Default Account Vulnerability in CS5000 Fire Panel by Consilium Safety

CVE-2025-41438

What is CVE-2025-41438?

The CS5000 Fire Panel is at risk due to a default account that has not been changed in deployed systems. Despite the ability to alter this account through SSH access, the default credentials remain intact, presenting a significant security concern. This account, while not root, possesses elevated permissions that could lead to severe operational disruptions if exploited by malicious actors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

CVE-2025-41438CVE-2025-46352

Critical Bugs Open Fire Safety OT/ICS Platform to Takeover

The unpatched security vulnerabilities in Consilium Safety's CS5000 Fire Panel could create "serious safety issues" in environments where fire suppression and safety are paramount, according to a CISA advisory.

GBHackers News

CVE-2025-41438CVE-2025-46352

Severe Vulnerabilities in Consilium CS5000 Fire Panels Allow Remote System Takeover

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued alert ICSA-25-148-03 on May 29, 2025.

References