CVE-2025-52548

Katalog CVE

CVSS 4.9 · Medium EPSS 0,34%

Kerentanan Inclusion of Undocumented Features or Chicken Bits pada copeland e3 supervisory controller firmware. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.

Rincian

Terbit di NVD

2 September 2025

Terakhir diubah

5 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1242: Inclusion of Undocumented Features or Chicken Bits

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.armis.com/research/frostbyte10/ mitigasi · advisory pihak ketiga