Description
E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Copeland LP | E3 Supervisory Control | < 2.31F01 | 2.31F01 |