Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services
Priority MEDIUM 41CWE-522Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-522.
Summary
E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00539 45th percentileScored 2026-11-07
Fix Fixed E3 Supervisory Control (Copeland LP): 2.31F01
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Copeland | E3 Supervisory Control | before 2.31F01 | 2.31F01 | Patch available | CNA |
- E3 Supervisory Control VendorCopeland Affected before 2.31F01 Fixed in 2.31F01 Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:* | before 2.31f01 | Vulnerable | Copeland |
| cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
- cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:* Versions before 2.31f01 Vulnerable ·Copeland
- cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
Remediation
- Fix · CNA E3 Supervisory Control (Copeland LP) Fixed in 2.31F01
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Copeland LP E3 Supervisory Control 2.31F01
9 records Highest priority Priority MEDIUM 5 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2025-32644 Predictable root linux password generationPriority MEDIUM 48
- TI-2025-32645 Firmware upgrade packages are unsignedPriority MEDIUM 45
- TI-2025-32642 DoS to the application servicesPriority MEDIUM 44
Timeline
- 2026-10-02 Threatist record created from CVE-2025-6519
- 2026-10-03 Alias added: GHSA-48q9-vxr9-j39f
References
More Copeland E3 Supervisory Controller Firmware vulnerabilities
- TI-2025-32644 Predictable root linux password generation CVSS 4.0CRITICAL 9.2
- TI-2025-32645 Firmware upgrade packages are unsigned CVSS 4.0HIGH 8.6
- TI-2025-32642 DoS to the application services CVSS 4.0HIGH 8.7
- TI-2025-32639 Arbitrary read file from the filesystem CVSS 4.0HIGH 8.8
- TI-2025-32640 Privilege escalation in the application services CVSS 4.0HIGH 7.7
- TI-2025-32643 Enabling SSH and Shellinabox on the vulnerable machine CVSS 4.0MEDIUM 6.9
Sources
- CVE-2025-6519 · CVE Program
- CVE-2025-6519 · NVD
- FIRST EPSS
- GHSA-48q9-vxr9-j39f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences