Enabling SSH and Shellinabox on the vulnerable machine
Priority LOW 30CWE-1242Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00357 29th percentileScored 2026-11-07
Fix Fixed E3 Supervisory Control (Copeland LP): 2.31F01
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Copeland | E3 Supervisory Control | before 2.31F01 | 2.31F01 | Patch available | CNA |
- E3 Supervisory Control VendorCopeland Affected before 2.31F01 Fixed in 2.31F01 Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:* | before 2.31f01 | Vulnerable | Copeland |
| cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
| cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Copeland |
- cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:* Versions before 2.31f01 Vulnerable ·Copeland
- cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
- cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Copeland
Remediation
- Fix · CNA E3 Supervisory Control (Copeland LP) Fixed in 2.31F01
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Copeland LP E3 Supervisory Control 2.31F01
9 records Highest priority Priority MEDIUM 5 MEDIUM, 4 LOW
Other records, highest priority first
- TI-2025-32644 Predictable root linux password generationPriority MEDIUM 48
- TI-2025-32645 Firmware upgrade packages are unsignedPriority MEDIUM 45
- TI-2025-32642 DoS to the application servicesPriority MEDIUM 44
Timeline
- 2026-10-02 Threatist record created from CVE-2025-52548
- 2026-10-03 Alias added: GHSA-pf3m-qw97-hpvm
References
More Copeland E3 Supervisory Controller Firmware vulnerabilities
- TI-2025-32644 Predictable root linux password generation CVSS 4.0CRITICAL 9.2
- TI-2025-32645 Firmware upgrade packages are unsigned CVSS 4.0HIGH 8.6
- TI-2025-32642 DoS to the application services CVSS 4.0HIGH 8.7
- TI-2025-32639 Arbitrary read file from the filesystem CVSS 4.0HIGH 8.8
- TI-2025-05919 Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services CVSS 4.0CRITICAL 9.3
- TI-2025-32640 Privilege escalation in the application services CVSS 4.0HIGH 7.7
Sources
- CVE-2025-52548 · CVE Program
- CVE-2025-52548 · NVD
- FIRST EPSS
- GHSA-pf3m-qw97-hpvm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences