E3 Supervisory Controller Firmware vulnerabilities
7 known vulnerabilities in E3 Supervisory Controller Firmware from Copeland. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
E3 Supervisory Control: Insufficiently Protected Credentials
E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.
- 7.2 High severity
E3 Supervisory Control: Improper Verification of Cryptographic Signature
E3 Site Supervisor Control (firmware version < 2.31F01) firmware upgrade packages are unsigned. An attacker can forge malicious firmware upgrade packages. An attacker with admin access to the application services can install a malicious firmware upgrade.
- 9.8 Critical severity
E3 Supervisory Control: Insufficiently Protected Credentials
E3 Site Supervisor Control (firmware version < 2.31F01) generates the root linux password on each boot. An attacker can generate the root linux password for a vulnerable device based on known or easy to fetch parameters.
- 7.5 High severity
E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks…
E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services.
- 7.5 High severity
E3 Supervisory Control: Insufficiently Protected Credentials
E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.
- 7.5 High severity
E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows…
E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can access any file from the E3 file system.
- 7.5 High severity
E3 Supervisory Control: Use of Password Hash Instead of Password for Authentication
E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.