Copeland LP

Products

Product	CVEs	Exploited	Latest
E3 Supervisory Control	9	–	Sep 2, 2025
E2 Facility Management System	1	–	Sep 2, 2025

CVE-2025-52551 Critical 9.3 Proprietary protocol allows for unauthenticated file operations 0.3%
CVE-2025-52550 High 8.6 Firmware upgrade packages are unsigned 0.2%
CVE-2025-52549 Critical 9.2 Predictable root linux password generation 0.5%
CVE-2025-52548 Medium 6.9 Enabling SSH and Shellinabox on the vulnerable machine 0.4%
CVE-2025-52547 High 8.7 DoS to the application services 0.3%
CVE-2025-52546 Medium 5.1 Stored XSS by uploading a specially crafted floor plan file 0.2%
CVE-2025-52545 High 7.7 Privilege escalation in the application services 0.3%
CVE-2025-52544 High 8.8 Arbitrary read file from the filesystem 0.4%
CVE-2025-52543 Medium 5.3 Login to the application services using only the password hash 0.3%
CVE-2025-6519 Critical 9.3 Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services 0.5%