CVE-2025-6519

E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.armis.com/research/frostbyte10/	Third Party Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:::::::*
	cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:::::::*

History

23 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) E3 Site Supervisor (versión de firmware anteriores a 2.31F01) tiene un usuario administrador predeterminado 'ONEDAY' con una contraseña generada diariamente. Un atacante puede generar de forma predecible la contraseña para ONEDAY. El usuario oneday no puede ser eliminado ni modificado por ningún usuario.

Information

Published : 2025-09-02 12:15

Updated : 2026-10-23 22:10

NVD link : CVE-2025-6519

Mitre link : CVE-2025-6519

CVE.ORG link : CVE-2025-6519

JSON object : View

Products Affected

copeland

site_supervisor_cxe_860-1265
e3_supervisory_controller_firmware
site_supervisor_bx_860-1240
site_supervisor_cx_860-1260
site_supervisor_bxe_860-1245
site_supervisor_rx_860-1220
site_supervisor_rxe_860-1225
site_supervisor_sf_860-1200

CWE

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2025-6519", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6519", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-02T14:01:56.421126Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "affectedData": [{"vendor": "Copeland LP", "product": "E3 Supervisory Control", "versions": [{"status": "affected", "version": "0", "lessThan": "2.31F01", "versionType": "firmware"}], "defaultStatus": "affected"}]}], "published": "2025-09-02T12:15:38.607", "references": [{"url": "https://www.armis.com/research/frostbyte10/", "tags": ["Third Party Advisory"], "source": "dd59f033-460c-4b88-a075-d4d3fedb6191"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user."}, {"lang": "es", "value": "E3 Site Supervisor (versi\u00f3n de firmware anteriores a 2.31F01) tiene un usuario administrador predeterminado 'ONEDAY' con una contrase\u00f1a generada diariamente. Un atacante puede generar de forma predecible la contrase\u00f1a para ONEDAY. El usuario oneday no puede ser eliminado ni modificado por ning\u00fan usuario."}], "lastModified": "2026-10-23T22:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "791AC7BF-A584-446A-A5FB-CB282430567A", "versionEndExcluding": "2.31f01"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62991432-9156-4152-B940-4428A06ABBDA"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7281C06F-83DC-4A57-9076-B666C643B1A0"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FC339BFF-3123-4BE2-8092-3AD6FBB0AEFF"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C42AA549-5959-4E4D-81AD-9E04218EC157"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F77BC1C-9709-40CB-AF4D-6A118D8F41E2"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F10BB44-439E-4823-8ECF-1700355C78E3"}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4909D80-1F06-437F-8D66-E39535B5E60D"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "dd59f033-460c-4b88-a075-d4d3fedb6191"}