Critical Bugs Could Spark Takeover of Widely Used Fire Safety OT/ICS Platform

CISA and security researchers disclosed two critical, unpatched vulnerabilities in Consilium CS5000 fire panels (CVE-2025-41438 and CVE-2025-46352) that allow remote takeover via a default account and a hardcoded VNC password; Consilium recommends replacing affected units rather than patching, and CISA advises compensating controls to mitigate significant physical-safety risks across an estimated 85,000 installed devices.