CVE-2025-40585
CRITICAL9.9CVSS v3
—CVSS v2
0.28%
EPSS (exploit probability)
CWE-276CWE
Description
A vulnerability has been identified in Energy Services (All versions with G5DFR). Affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of G5DFR component and tamper with outputs from the device.
CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.