Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-52550

Firmware upgrade packages are unsigned

Description

E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Copeland LP E3 Supervisory Control

Default version status: affected

  • 0 to < 2.31F01affected

References