What is CVE-2025-41438?

CVE-2025-41438 is a critical-severity vulnerability in Consilium Safety Cs5000 Fire Panel, classified under Initialization of a Resource with an Insecure Default. CVSS score: 9.8/10. Published 2025-05-30.

How severe is CVE-2025-41438?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Consilium Safety Cs5000 Fire Panel

CVE-2025-41438

The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's operation if exploited.

EPSS: 0.007 (50.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Consilium Safety Cs5000 Fire Panel — versions All versions

Weakness classification (CWE)

CWE-1188 — Initialization of a Resource with an Insecure Default

References

Frequently asked questions

What is CVE-2025-41438?: CVE-2025-41438 is a critical-severity vulnerability in Consilium Safety Cs5000 Fire Panel, classified under Initialization of a Resource with an Insecure Default. CVSS score: 9.8/10. Published 2025-05-30.
How severe is CVE-2025-41438?: Critical severity. CVSS v3 base score is 9.8 out of 10.