high7.2
CVE-2025-52550
E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned.
Impact
E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Copeland | E3 Supervisory Controller Firmware | before 2.31f01 |