Skip to content
OpenAdvisories
High · 7.7 CVE-2025-52545 EUVD-2025-26400GHSA-xcg5-x6ph-w58q

Privilege escalation in the application services

Published Sep 2, 2025 · Updated Sep 2, 2025 · Assigned by Armis

Description

E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.

Affected products

VendorProductAffectedFixed
Copeland LP E3 Supervisory Control < 2.31F01 2.31F01

References