High severity7.5NVD Advisory· Published Sep 2, 2025· Updated Jun 17, 2026

CVE-2025-52545

Description

E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.

Affected products

Copeland/E3 Supervisory Controller Firmware
cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:*
Range: <2.31f01
Copeland LP/E3 Supervisory Controlv5
Range: 0

Patches

Vulnerability mechanics

References

www.armis.com/research/frostbyte10/nvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000