CVE-2025-52543

HIGH · 7.5 CVSS Gepubliceerd: 02-09-2025 CWE-836

Beschrijving

E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.

Vendors

Copeland

Affected products

E3 Supervisory Controller Firmware Site Supervisor Bx 860-1240 Site Supervisor Bxe 860-1245 Site Supervisor Cx 860-1260 Site Supervisor Cxe 860-1265 Site Supervisor Rx 860-1220 Site Supervisor Rxe 860-1225 Site Supervisor Sf 860-1200

References

www.armis.com