CVE-2025-6519

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-6519", "assignerOrgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "state": "PUBLISHED", "assignerShortName": "Armis", "dateReserved": "2025-06-23T13:29:43.161Z", "datePublished": "2025-09-02T11:23:59.838Z", "dateUpdated": "2025-09-02T15:25:44.338Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "E3 Supervisory Control", "vendor": "Copeland LP", "versions": [{"lessThan": "2.31F01", "status": "affected", "version": "0", "versionType": "firmware"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Armis Labs"}], "datePublic": "2025-07-29T12:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "E3 Site Supervisor (firmware version &lt; 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.<br>"}], "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "shortName": "Armis", "dateUpdated": "2025-09-02T11:23:59.838Z"}, "references": [{"url": "https://www.armis.com/research/frostbyte10/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version &gt; 2.30F1.<br>"}], "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1."}], "source": {"discovery": "UNKNOWN"}, "title": "Consistent predictable generation of the password for the default admin user \"ONEDAY\" to the application services", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."}], "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-02T14:01:56.421126Z", "id": "CVE-2025-6519", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T15:25:44.338Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-6519", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-02T14:01:56.421126Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T15:25:39.833Z"}}], "cna": {"title": "Consistent predictable generation of the password for the default admin user \"ONEDAY\" to the application services", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Armis Labs"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Copeland LP", "product": "E3 Supervisory Control", "versions": [{"status": "affected", "version": "0", "lessThan": "2.31F01", "versionType": "firmware"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1.", "supportingMedia": [{"type": "text/html", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version &gt; 2.30F1.<br>", "base64": false}]}], "datePublic": "2025-07-29T12:00:00.000Z", "references": [{"url": "https://www.armis.com/research/frostbyte10/"}], "workarounds": [{"lang": "en", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks.", "supportingMedia": [{"type": "text/html", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.", "supportingMedia": [{"type": "text/html", "value": "E3 Site Supervisor (firmware version &lt; 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials"}]}], "providerMetadata": {"orgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "shortName": "Armis", "dateUpdated": "2025-09-02T11:23:59.838Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6519", "state": "PUBLISHED", "dateUpdated": "2025-09-02T15:25:44.338Z", "dateReserved": "2025-06-23T13:29:43.161Z", "assignerOrgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "datePublished": "2025-09-02T11:23:59.838Z", "assignerShortName": "Armis"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "E3 Supervisory Control", "vendor": "Copeland LP", "versions": [{"lessThan": "2.31F01", "status": "affected", "version": "0", "versionType": "firmware"}]}], "source": "dd59f033-460c-4b88-a075-d4d3fedb6191"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:copeland:e3_supervisory_controller_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "791AC7BF-A584-446A-A5FB-CB282430567A", "versionEndExcluding": "2.31f01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:copeland:site_supervisor_bx_860-1240:-:*:*:*:*:*:*:*", "matchCriteriaId": "62991432-9156-4152-B940-4428A06ABBDA", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_bxe_860-1245:-:*:*:*:*:*:*:*", "matchCriteriaId": "7281C06F-83DC-4A57-9076-B666C643B1A0", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_cx_860-1260:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC339BFF-3123-4BE2-8092-3AD6FBB0AEFF", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_cxe_860-1265:-:*:*:*:*:*:*:*", "matchCriteriaId": "C42AA549-5959-4E4D-81AD-9E04218EC157", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_rx_860-1220:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F77BC1C-9709-40CB-AF4D-6A118D8F41E2", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_rxe_860-1225:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F10BB44-439E-4823-8ECF-1700355C78E3", "vulnerable": false}, {"criteria": "cpe:2.3:h:copeland:site_supervisor_sf_860-1200:-:*:*:*:*:*:*:*", "matchCriteriaId": "B4909D80-1F06-437F-8D66-E39535B5E60D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user."}, {"lang": "es", "value": "E3 Site Supervisor (versi\u00f3n de firmware anteriores a 2.31F01) tiene un usuario administrador predeterminado 'ONEDAY' con una contrase\u00f1a generada diariamente. Un atacante puede generar de forma predecible la contrase\u00f1a para ONEDAY. El usuario oneday no puede ser eliminado ni modificado por ning\u00fan usuario."}], "id": "CVE-2025-6519", "lastModified": "2026-10-23T22:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6519", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-09-02T14:01:56.421126Z", "version": "2.0.3"}}]}, "published": "2025-09-02T12:15:38.607", "references": [{"source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "tags": ["Third Party Advisory"], "url": "https://www.armis.com/research/frostbyte10/"}], "sourceIdentifier": "dd59f033-460c-4b88-a075-d4d3fedb6191", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-522"}], "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "type": "Secondary"}]}

{}

{}