{"id":4297,"date":"2025-07-31T18:05:23","date_gmt":"2025-07-31T18:05:23","guid":{"rendered":"https:\/\/securitybriefing.net\/biz-data\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/"},"modified":"2026-07-23T16:58:54","modified_gmt":"2026-07-23T16:58:54","slug":"cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286","status":"publish","type":"post","link":"https:\/\/securitybriefing.net\/da\/cyber-advarsler\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/","title":{"rendered":"CISA-advarsel: Kritisk fejl i G\u00fcralp FMUS seismiske enheder (CVE-2025-8286)"},"content":{"rendered":"<p>CISA published industrial control system advisory <a href=\"https:\/\/www.cisa.gov\/news-events\/ics-advisories\/icsa-25-212-01\" target=\"_blank\" rel=\"noopener\">ICSA-25-212-01<\/a> on July 31, 2025, warning of a critical vulnerability in G\u00fcralp Systems FMUS-series seismic monitoring devices. Tracked as <strong><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-8286\" target=\"_blank\" rel=\"noopener\">CVE-2025-8286<\/a><\/strong> and rated CVSS v3.1 9.8 (CVSS v4.0 9.3), the flaw is a textbook case of missing authentication for a critical function (CWE-306).<\/p>\n<h2>An open door over Telnet<\/h2>\n<p>The affected devices expose an <strong>unauthenticated Telnet-based command-line interface<\/strong>. Any attacker who can reach that open port over the network can connect without credentials and take privileged control &mdash; modifying hardware configuration, manipulating or corrupting the seismic data the instruments record, or triggering a full factory reset. Because the flaw is remotely exploitable with low complexity and requires no privileges or user interaction, it is trivial to abuse once the device is reachable.<\/p>\n<h2>Scope and vendor response<\/h2>\n<p>CISA lists <strong>all versions<\/strong> of the FMUS series as affected, and a later revision of the advisory expanded coverage to the G\u00fcralp MIN-series digitizers as well. The vulnerability was reported to CISA by Souvik Kandar of MicroSec. As of publication, G\u00fcralp had not confirmed an official firmware fix and did not respond to CISA&#8217;s coordination attempts, so operators cannot simply patch their way out.<\/p>\n<h2>How to reduce the risk<\/h2>\n<p>Seismic monitoring feeds early-warning and research systems, so data integrity matters as much as availability &mdash; a tampered device could inject false readings or go dark. CISA&#8217;s guidance is defensive and network-focused: ensure these devices are never reachable from the internet, place them behind firewalls and isolate them from business networks, and use up-to-date VPNs or jump hosts for any remote access. Operators should audit whether any FMUS or MIN unit is exposing Telnet and lock that access down immediately.<\/p>","protected":false},"excerpt":{"rendered":"<p>CISA published industrial control system advisory ICSA-25-212-01 on July 31, 2025, warning of a critical vulnerability in G\u00fcralp Systems FMUS-series seismic monitoring devices. Tracked as CVE-2025-8286 and rated CVSS v3.1&hellip; <a class=\"more-link\" href=\"https:\/\/securitybriefing.net\/da\/cyber-advarsler\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/\">Read more <span class=\"screen-reader-text\">CISA-advarsel: Kritisk fejl i G\u00fcralp FMUS seismiske enheder (CVE-2025-8286)<\/span><\/a><\/p>","protected":false},"author":3,"featured_media":4296,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40],"tags":[],"class_list":["post-4297","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-alerts","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices<\/title>\n<meta name=\"description\" content=\"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026\" \/>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"da_DK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices\" \/>\n<meta property=\"og:description\" content=\"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026\" \/>\n<meta property=\"og:url\" content=\"https:\/\/securitybriefing.net\/da\/cyber-advarsler\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/\" \/>\n<meta property=\"og:site_name\" content=\"Security Briefing\" \/>\n<meta property=\"article:published_time\" content=\"2025-07-31T18:05:23+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-23T16:58:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"853\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"C\u00e9sar Daniel Barreto\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Skrevet af\" \/>\n\t<meta name=\"twitter:data1\" content=\"C\u00e9sar Daniel Barreto\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimeret l\u00e6setid\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/\"},\"headline\":\"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices (CVE-2025-8286)\",\"datePublished\":\"2025-07-31T18:05:23+00:00\",\"dateModified\":\"2026-07-23T16:58:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/\"},\"wordCount\":295,\"publisher\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg\",\"articleSection\":[\"cyber alerts\"],\"inLanguage\":\"da-DK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/\",\"url\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/\",\"name\":\"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg\",\"datePublished\":\"2025-07-31T18:05:23+00:00\",\"dateModified\":\"2026-07-23T16:58:54+00:00\",\"description\":\"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#breadcrumb\"},\"inLanguage\":\"da-DK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"da-DK\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#primaryimage\",\"url\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg\",\"contentUrl\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2025\\\/07\\\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg\",\"width\":1280,\"height\":853,\"caption\":\"G\u00fcralp Systems G\u00fcralp FMUS series cybersecurity vulnerability alert CVSS 9.3\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/securitybriefing.net\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"cyber alerts\",\"item\":\"https:\\\/\\\/securitybriefing.net\\\/cyber-alerts\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices (CVE-2025-8286)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#website\",\"url\":\"https:\\\/\\\/securitybriefing.net\\\/\",\"name\":\"Security Briefing\",\"description\":\"Read cybersecurity news, online safety guides, cyber threat updates, and use free security tools from Security Briefing.\",\"publisher\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/securitybriefing.net\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"da-DK\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#organization\",\"name\":\"Security Briefing\",\"url\":\"https:\\\/\\\/securitybriefing.net\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"da-DK\",\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/security-briefing-logo-5.png\",\"contentUrl\":\"https:\\\/\\\/securitybriefing.net\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/security-briefing-logo-5.png\",\"width\":256,\"height\":70,\"caption\":\"Security Briefing\"},\"image\":{\"@id\":\"https:\\\/\\\/securitybriefing.net\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CISA-advarsel: Kritisk fejl i G\u00fcralp FMUS-seismiske enheder","description":"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026","robots":{"index":"noindex","follow":"follow"},"og_locale":"da_DK","og_type":"article","og_title":"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices","og_description":"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026","og_url":"https:\/\/securitybriefing.net\/da\/cyber-advarsler\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/","og_site_name":"Security Briefing","article_published_time":"2025-07-31T18:05:23+00:00","article_modified_time":"2026-07-23T16:58:54+00:00","og_image":[{"width":1280,"height":853,"url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg","type":"image\/jpeg"}],"author":"C\u00e9sar Daniel Barreto","twitter_card":"summary_large_image","twitter_misc":{"Skrevet af":"C\u00e9sar Daniel Barreto","Estimeret l\u00e6setid":"1 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#article","isPartOf":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/"},"headline":"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices (CVE-2025-8286)","datePublished":"2025-07-31T18:05:23+00:00","dateModified":"2026-07-23T16:58:54+00:00","mainEntityOfPage":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/"},"wordCount":295,"publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"image":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#primaryimage"},"thumbnailUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg","articleSection":["cyber alerts"],"inLanguage":"da-DK"},{"@type":"WebPage","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/","url":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/","name":"CISA-advarsel: Kritisk fejl i G\u00fcralp FMUS-seismiske enheder","isPartOf":{"@id":"https:\/\/securitybriefing.net\/#website"},"primaryImageOfPage":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#primaryimage"},"image":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#primaryimage"},"thumbnailUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg","datePublished":"2025-07-31T18:05:23+00:00","dateModified":"2026-07-23T16:58:54+00:00","description":"CISA advisory ICSA-25-212-01 warns of an unauthenticated Telnet flaw (CVE-2025-8286, CVSS 9.8) in G\u00fcralp FMUS seismic monitors that lets attackers reset\u2026","breadcrumb":{"@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#breadcrumb"},"inLanguage":"da-DK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/"]}]},{"@type":"ImageObject","inLanguage":"da-DK","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#primaryimage","url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg","contentUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2025\/07\/gyralp_systems_gyralp_fmus_series_cybersecurity_vulnerability_alert_cvss_93.jpg","width":1280,"height":853,"caption":"G\u00fcralp Systems G\u00fcralp FMUS series cybersecurity vulnerability alert CVSS 9.3"},{"@type":"BreadcrumbList","@id":"https:\/\/securitybriefing.net\/cyber-alerts\/cisa-alert-critical-flaw-in-guralp-fmus-seismic-devices-cve-2025-8286\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/securitybriefing.net\/"},{"@type":"ListItem","position":2,"name":"cyber alerts","item":"https:\/\/securitybriefing.net\/cyber-alerts\/"},{"@type":"ListItem","position":3,"name":"CISA Alert: Critical Flaw in G\u00fcralp FMUS Seismic Devices (CVE-2025-8286)"}]},{"@type":"WebSite","@id":"https:\/\/securitybriefing.net\/#website","url":"https:\/\/securitybriefing.net\/","name":"Sikkerhedsbriefing","description":"L\u00e6s cybersikkerhedsnyheder, online sikkerhedsguider, opdateringer om cybertrusler, og brug gratis sikkerhedsv\u00e6rkt\u00f8jer fra Security Briefing.","publisher":{"@id":"https:\/\/securitybriefing.net\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/securitybriefing.net\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"da-DK"},{"@type":"Organization","@id":"https:\/\/securitybriefing.net\/#organization","name":"Sikkerhedsbriefing","url":"https:\/\/securitybriefing.net\/","logo":{"@type":"ImageObject","inLanguage":"da-DK","@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/","url":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","contentUrl":"https:\/\/securitybriefing.net\/wp-content\/uploads\/2023\/06\/security-briefing-logo-5.png","width":256,"height":70,"caption":"Security Briefing"},"image":{"@id":"https:\/\/securitybriefing.net\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/posts\/4297","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/comments?post=4297"}],"version-history":[{"count":1,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/posts\/4297\/revisions"}],"predecessor-version":[{"id":6165,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/posts\/4297\/revisions\/6165"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/media\/4296"}],"wp:attachment":[{"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/media?parent=4297"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/categories?post=4297"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securitybriefing.net\/da\/wp-json\/wp\/v2\/tags?post=4297"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}