Description
On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset string) into a USB port.
Advisories 3
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- ICSA-25-345-08 Siemens Energy Services CISA ICS & IT advisories · Dec 9, 2025
- SSA-734261 SSA-734261: Authentication Bypass Vulnerability in Energy Services Using Elspec G5DFR Siemens ProductCERT · Dec 9, 2025