No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. These vulnerabilities are not exploitable remotely.
Credit: Andrew Tierney (Pen Test Partners)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-41438 | CWE-1188 Initialization of a Resource with an Insecure Default | 8.4 High |
The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's operation if exploited. Vendor fix: Consilium Safety has released software version R1.17.1 for the CS5000 Fire Panel. Users should contact their local Consilium office for assistance with applying the update. Mitigation: Due to the nature of Consilium systems and their deployment in controlled OT environments, software updates are not published for public download. Asset owners should obtain version R1.17.1 through their normal Consilium representative or local support office… Mitigation: Security configuration and hardening recommendations reflecting the changes in R1.17.1 will be provided directly to asset owners as part of the product documentation. These documents are not available as public download links. Affected, fixed & timelineAffected:
Mitigation: Asset owners who want enhanced security features are advised to upgrade to Consilium Safety's newer line of fire panels. Specifically, products manufactured after July 1, 2024, incorporate more secure-by-design principles. Vendor fix: Owners of the CS5000 Fire Panel are recommended to implement compensating countermeasures, such as physical security and access control restrictions for dedicated personnel. Mitigation: More product safety information can be found on Consilium Safety's support webpage. |
| CVE-2025-46352 | CWE-798 Use of Hard-coded Credentials | 8.4 High |
The CS5000 Fire Panel is vulnerable due to a hard-coded password that runs on a VNC server and is visible as a string in the binary responsible for running VNC. This password cannot be altered, allowing anyone with knowledge of it to gain remote access to the panel. Such access could enable an attacker to operate the panel remotely, potentially putting the fire panel into a non-functional state and causing serious safety issues. Vendor fix: Consilium Safety has released software version R1.17.1 for the CS5000 Fire Panel. Users should contact their local Consilium office for assistance with applying the update. Mitigation: Due to the nature of Consilium systems and their deployment in controlled OT environments, software updates are not published for public download. Asset owners should obtain version R1.17.1 through their normal Consilium representative or local support office… Mitigation: Security configuration and hardening recommendations reflecting the changes in R1.17.1 will be provided directly to asset owners as part of the product documentation. These documents are not available as public download links. Affected, fixed & timelineAffected:
Mitigation: Asset owners who want enhanced security features are advised to upgrade to Consilium Safety's newer line of fire panels. Specifically, products manufactured after July 1, 2024, incorporate more secure-by-design principles. Vendor fix: Owners of the CS5000 Fire Panel are recommended to implement compensating countermeasures, such as physical security and access control restrictions for dedicated personnel. Mitigation: More product safety information can be found on Consilium Safety's support webpage. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-41438 | 9.8 Critical | Consilium Safety CS5000 Fire Panel The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the… |
| CVE-2025-46352 | 9.8 Critical | Consilium Safety CS5000 Fire Panel The CS5000 Fire Panel is vulnerable due to a hard-coded password that runs on a VNC server and is visible as a string in the binary responsible for… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.