Default Account Vulnerability in CS5000 Fire Panel by Consilium Safety

CVE-2025-41438

What is CVE-2025-41438?

The CS5000 Fire Panel is at risk due to a default account that has not been changed in deployed systems. Despite the ability to alter this account through SSH access, the default credentials remain intact, presenting a significant security concern. This account, while not root, possesses elevated permissions that could lead to severe operational disruptions if exploited by malicious actors.

References