CL
Vendor
Copeland LP
10
CVEs
0
On KEV
0
New 30D
Products
ES9.8
E3 Supervisory Control
Copeland LP
9 CVEs0 on KEV0 new
EF9.3
E2 Facility Management System
Copeland LP
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-52551 | EF E2 Facility Management System Copeland LP | 9.3 | Sep 2 | Proprietary protocol allows for unauthenticated file operations |
| CVE-2025-52550 | ES E3 Supervisory Control Copeland LP | 7.2 | Sep 2 | Firmware upgrade packages are unsigned |
| CVE-2025-52549 | ES E3 Supervisory Control Copeland LP | 9.8 | Sep 2 | Predictable root linux password generation |
| CVE-2025-52548 | ES E3 Supervisory Control Copeland LP | 4.9 | Sep 2 | Enabling SSH and Shellinabox on the vulnerable machine |
| CVE-2025-52547 | ES E3 Supervisory Control Copeland LP | 7.5 | Sep 2 | DoS to the application services |
| CVE-2025-52546 | ES E3 Supervisory Control Copeland LP | 6.1 | Sep 2 | Stored XSS by uploading a specially crafted floor plan file |
| CVE-2025-52545 | ES E3 Supervisory Control Copeland LP | 7.5 | Sep 2 | Privilege escalation in the application services |
| CVE-2025-52544 | ES E3 Supervisory Control Copeland LP | 7.5 | Sep 2 | Arbitrary read file from the filesystem |
| CVE-2025-52543 | ES E3 Supervisory Control Copeland LP | 7.5 | Sep 2 | Login to the application services using only the password hash |
| CVE-2025-6519 | ES E3 Supervisory Control Copeland LP | 9.8 | Sep 2 | Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services |
