Remote Access Vulnerability in CS5000 Fire Panel by Vendor

CVE-2025-46352

What is CVE-2025-46352?

The CS5000 Fire Panel possesses a significant vulnerability originating from a hard-coded password embedded in its binary, which governs the VNC server functionality. This password's fixed nature prevents any alterations, granting potential attackers the ability to establish remote access effortlessly. Such unauthorized access could undermine the fire safety of the facility by allowing intruders to manipulate or disable the fire panel, leading to severe safety risks for occupants and property.

References