Skip to content
OpenAdvisories

Vendor

Copeland LP

10 known vulnerabilities.

Products

E3 Supervisory Control 9 E2 Facility Management System 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-52548

    Enabling SSH and Shellinabox on the vulnerable machine

    E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize thi…

    Copeland LP E3 Supervisory Control
  • Medium 5.1
    CVE-2025-52546

    Stored XSS by uploading a specially crafted floor plan file

    E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web…

    Copeland LP E3 Supervisory Control
  • Medium 5.3
    CVE-2025-52543

    Login to the application services using only the password hash

    E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.

    Copeland LP E3 Supervisory Control