Medium severity6.8NVD Advisory· Published Nov 6, 2025· Updated Jun 17, 2026

CVE-2025-59392

Description

On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive (containing a publicly documented reset string) into a USB port.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elspec Ltd/G5dfr Firmware
cpe:2.3:o:elspec-ltd:g5dfr_firmware:*:*:*:*:*:*:*:*
Range: <1.2.3.13
Elspec/G5 devicesdescription
Elspec/G5llm-create
Range: <=1.2.2.19

Patches

Vulnerability mechanics

References

www.elspec-ltd.com/support/security-advisories/nvdVendor Advisory
www.elspec-ltd.com/metering-protection/g5-multi-functional-digital-fault-recorder/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.442
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000