Description
A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Energy Services | — | — |
Advisories 3
- SSA-345750 SSA-345750: Default Credentials in Energy Services Using Elspec G5DFR Siemens ProductCERT · Jun 16, 2025
- NCSC-2025-0187 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Jun 10, 2025
- ICSA-25-162-06 Siemens Energy Services CISA ICS & IT advisories · Jun 10, 2025