Critical authentication bypass in Güralp Systems seismic monitoring devices

#cybersecurity #infosec

Summary

Güralp Systems reported a critical authentication bypass vulnerability (CVE-2025-8286) in its FMUS and MIN series seismic devices, allowing unauthenticated attackers to modify configurations or factory reset hardware.

Take Action:

Make sure all Güralp devices are isolated from the internet and accessible from trusted networks only. Review the patch, and consult with the vendor since it's still experimental. At minimum, isolate all systems from the internet, then wait for the final patch.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines