Authentication Bypass Vulnerability in Energy Services Using Elspec G5DFR

An attacker with physical access to an Elspec G5DFR device can reset the administrator password using a USB drive, gaining full control of the device and potentially altering power quality monitoring, alarming, or data logging functions critical to grid operations.

Energy utilities and power quality monitoring operations using Siemens Energy Services with Elspec G5DFR power quality analyzers and monitoring devices should assess exposure. The vulnerability affects facilities relying on G5DFR for grid monitoring, load analysis, and alarm generation in substations and distribution control centers.

An attacker physically approaches the Elspec G5DFR device, inserts a USB drive containing a publicly documented reset string, and executes the password reset procedure. Once the admin password is reset, the attacker gains administrative access to configure or disable monitoring and alarming functions on the device.