Siemens Energy Services
view advisory published 2025-06-10
Siemens Energy Services (previously known as Managed Applications and Services), sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker to gain remote control of the G5DFR component and tamper outputs from the device.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-40585US | —OT elevated | — | ||
A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain c… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR - CSAF Versionself
- SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR - HTML Versionself
- ICS Advisory ICSA-25-162-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-162-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedEnergy Services
Use the G5DFR web interface to change the default usernames, passwords and permission levels. Contact customer support for further assistance
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan