CVE-2025-46352 — AI Deep Analysis Summary

🚨 **Essence**: A critical trust management flaw in the **Consilium Safety CS5000 Fire Panel**.…

🔍 **Root Cause**: **CWE-798** (Use of Hard-coded Credentials). The VNC server ships with a static, unchangeable password, bypassing proper authentication mechanisms entirely.

🏭 **Affected**: **Consilium Safety CS5000 Fire Panel**. Specifically, units with the built-in VNC server enabled. 🇸🇪 Vendor: Consilium Safety (Sweden).

💀 **Hacker Capabilities**: Full remote control via VNC. Can read sensitive fire alarm data, modify system settings, and potentially disrupt fire safety operations. **High Privileges** gained with **No Auth** required.

⚡ **Exploitation Threshold**: **LOW**. Network Accessible (AV:N), Low Complexity (AC:L), No Privileges Required (PR:N), No User Interaction (UI:N). Anyone on the network can try it.

📦 **Public Exploit**: **None listed** in current data. However, given the hardcoded nature, simple scripts or VNC clients can likely exploit it immediately without a specific PoC.

🔎 **Self-Check**: Scan for open **VNC ports** (typically 5900) on the fire panel IP. Attempt connection with known default/hardcoded credentials. Check for VNC service banners.

🛠️ **Official Fix**: Check vendor support portal. 📅 Published: **2025-05-29**. CISA Advisory **ICSA-25-148-03** issued. Update firmware/software to remove hardcoded creds.

🚧 **No Patch?**: **Disable VNC service** immediately if possible. Isolate the fire panel on a **strictly segmented VLAN**. Block VNC ports (5900+) at the firewall. 🚫 No external access.

🔥 **Urgency**: **CRITICAL**. CVSS Score is **High** (likely 9.0+). Fire safety systems are critical infrastructure. Immediate mitigation required to prevent catastrophic operational disruption.