Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default
Priority MEDIUM 49CWE-1188Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's operation if exploited.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00732 54th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Consilium Safety | CS5000 Fire Panel | All versions | — | No fix listed | CNA |
- CS5000 Fire Panel VendorConsilium Safety Affected All versions Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-41438
- 2026-10-03 Alias added: GHSA-85xp-66c9-65fx
References
More Consilium Safety vulnerabilities
- TI-2025-29092 Consilium Safety CS5000 Fire Panel Use of Hard-coded Credentials CVSS 4.0CRITICAL 9.3
Sources
- CVE-2025-41438 · CVE Program
- CVE-2025-41438 · NVD
- FIRST EPSS
- GHSA-85xp-66c9-65fx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences