VYPR
Unrated severityNVD Advisory· Published Sep 2, 2025· Updated Sep 2, 2025

Firmware upgrade packages are unsigned

CVE-2025-52550

Description

E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade.

Affected products

1
  • Copeland LP/E3 Supervisory Controlv5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.