Siemens Energy Services
Advisory ansehen veröffentlicht 2025-06-10
Siemens Energy Services (previously known as Managed Applications and Services), sell solutions using Elspec G5 Digital Fault Recorder which contains default credentials with admin privileges. A client configuration with remote access could allow an attacker to gain remote control of the G5DFR component and tamper outputs from the device.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-40585US | —OT erhöht | — | ||
A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain c… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR - CSAF Versionself
- SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR - HTML Versionself
- ICS Advisory ICSA-25-162-06 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-25-162-06 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (1)
- BehobenEnergy Services
Use the G5DFR web interface to change the default usernames, passwords and permission levels. Contact customer support for further assistance
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan