Medium severity · published Sep 2, 2025
CVE-2025-52548
Enabling SSH and Shellinabox on the vulnerable machine
4.9
CVSS
0.4%
EPSS
No
On KEV
Description
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
E3 Supervisory Control · Copeland LP
before 2.31F01 · source: vendor
ES
E3 Supervisory Controller Firmware · Copeland
before 2.31f01 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-52548
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-52548
Mitigation
https://www.armis.com/research/frostbyte10/
More from E3 Supervisory Control
9.8
CVE-2025-52549
Predictable root linux password generation
9.8
CVE-2025-6519
Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services
7.5
CVE-2025-52547
DoS to the application services
7.5
CVE-2025-52545
Privilege escalation in the application services
7.5
CVE-2025-52544
Arbitrary read file from the filesystem