Skip to content
OpenAdvisories

Vendor

Copeland LP

10 known vulnerabilities.

Products

E3 Supervisory Control 9 E2 Facility Management System 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-52551

    Proprietary protocol allows for unauthenticated file operations

    E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system.

    Copeland LP E2 Facility Management System
  • Critical 9.2
    CVE-2025-52549

    Predictable root linux password generation

    E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters.

    Copeland LP E3 Supervisory Control
  • Critical 9.3
    CVE-2025-6519

    Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services

    E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.

    Copeland LP E3 Supervisory Control