VYPR
Unrated severityNVD Advisory· Published Sep 2, 2025· Updated Sep 2, 2025

Login to the application services using only the password hash

CVE-2025-52543

Description

E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.

Affected products

1
  • Copeland LP/E3 Supervisory Controlv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.