critical9.8
CVE-2025-6519
E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password.
Impact
E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Copeland | E3 Supervisory Controller Firmware | before 2.31f01 |