Siemens Energy Services Elspec G5DFR Default Credentials Vulnerability

A vulnerability exists in Siemens Energy Services solutions that utilize the Elspec G5 Digital Fault Recorder, all versions with G5DFR. These affected solutions contain default credentials that grant admin privileges. An attacker could exploit this vulnerability to gain remote control of the G5DFR component and manipulate the device's output.

Impact

Exploitation of this vulnerability could lead to unauthorized remote control of the G5DFR component, allowing an attacker to tamper with the device's outputs.

Remediation

Users are advised to change the default usernames, passwords, and permission levels using the G5DFR web interface. For further assistance, contact Siemens customer support.