CVE-2025-40585

Name of the Vulnerable Software and Affected Versions Energy Services versions with G5DFR

Description A vulnerability has been identified in Energy Services where affected solutions using G5DFR contain default credentials. This could allow an attacker to gain control of the G5DFR component and tamper with outputs from the device.

Recommendations For Energy Services versions with G5DFR, consider changing the default credentials to prevent unauthorized access. As a temporary workaround, restrict access to the G5DFR component to minimize the risk of exploitation.