CVE-2025-52544:
Unauthenticated attacker can upload a crafted floor plan file to Copeland E3 Supervisory Control firmware versions prior to 2.31F01, enabling arbitrary file reads on the device via path traversal due to improper input validation.
Score
A numerical rating that indicates how dangerous this vulnerability is.
7.5High- Published Date:Sep 2, 2025
- CISA KEV Date:*No Data*
- Industries Affected:20
Threat Predictions
- EPSS Score:0.2
- EPSS Percentile:40%
Exploitability
- Score:3.9
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Score:3.6
- Confidentiality Impact:HIGH
- Integrity Impact:NONE
- Availability Impact:NONE
Description Preview
Unauthenticated attacker can upload a crafted floor plan file to Copeland E3 Supervisory Control firmware versions prior to 2.31F01, enabling arbitrary file reads on the device via path traversal due to improper input validation.
Overview
This CVE describes a path traversal vulnerability in Copeland’s E3 Site Supervisor Control where an unauthenticated user can upload floor plan files. Due to insufficient input validation, the upload can be manipulated to access and read arbitrary files on the E3 filesystem. Affected firmware is prior to 2.31F01, and exploitation can occur over the network without user interaction. The vulnerability is tracked as CWE-20 with CAPEC-126 and has a high CVSS impact, primarily on confidentiality. Remedy requires upgrading to a firmware version greater than 2.30F1 (i.e., 2.31F01 or newer).
Remediation
- Upgrade firmware: Update all affected E3 Supervisory Controls to a version greater than 2.30F1 (ideally 2.31F01 or newer). Follow vendor instructions for firmware updates, including backup and change controls, and verify the update after completion.
- If immediate upgrade is not possible:
- Restrict network access to the E3 control interface (ETH0) using restricted VLANs/subnets and firewall rules to block access from untrusted networks.
- Disable the floor plan upload feature if the option exists in the management interface.
- Implement strict input validation and file upload controls at the network or gateway layer if configurable by the device or network stack.
- Monitor and alert on unusual or large file uploads to detect potential exploitation attempts.
- After remediation: verify that the firmware version is updated, re-test the floor plan upload flow, and confirm that arbitrary file reads are no longer possible.
References
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
