CVE-2025-52548 — Enabling SSH and Shellinabox on the vulnerable machine

CVE-2025-52548

Enabling SSH and Shellinabox on the vulnerable machine PUBLISHED

Description (CNA)

E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.

Affected (CNA)

Vendor / product	Versions
Copeland LP / E3 Supervisory Control	affected 0 before 2.31F01

CWE

CWE-1242

References

https://www.armis.com/research/frostbyte10/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.