CVE-2025-6519 - Vulnerability Details - OpenCVE

E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact Low

Subsequent System Availability Impact Low

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00042.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.armis.com/research/frostbyte10/

History

Tue, 02 Sep 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 02 Sep 2025 11:30:00 +0000

Type	Values Removed	Values Added
Description		E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.
Title		Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services
Weaknesses		CWE-522
References		https://www.armis.com/research/frostbyte10/
Metrics		cvssV4_0 `{'score': 9.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L'}`

MITRE

Status: PUBLISHED

Assigner: Armis

Published: 2025-09-02T11:23:59.838Z

Updated: 2025-09-02T15:25:44.338Z

Reserved: 2025-06-23T13:29:43.161Z

Link: CVE-2025-6519

Vulnrichment

Updated: 2025-09-02T15:25:39.833Z

NVD

Status : Awaiting Analysis

Published: 2025-09-02T12:15:38.607

Modified: 2025-09-02T15:55:25.420

Link: CVE-2025-6519

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-6519", "assignerOrgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "state": "PUBLISHED", "assignerShortName": "Armis", "dateReserved": "2025-06-23T13:29:43.161Z", "datePublished": "2025-09-02T11:23:59.838Z", "dateUpdated": "2025-09-02T15:25:44.338Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "E3 Supervisory Control", "vendor": "Copeland LP", "versions": [{"lessThan": "2.31F01", "status": "affected", "version": "0", "versionType": "firmware"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Armis Labs"}], "datePublic": "2025-07-29T12:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.<br>"}], "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user."}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "shortName": "Armis", "dateUpdated": "2025-09-02T11:23:59.838Z"}, "references": [{"url": "https://www.armis.com/research/frostbyte10/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1.<br>"}], "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1."}], "source": {"discovery": "UNKNOWN"}, "title": "Consistent predictable generation of the password for the default admin user \"ONEDAY\" to the application services", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."}], "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-02T14:01:56.421126Z", "id": "CVE-2025-6519", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T15:25:44.338Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-6519", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-02T14:01:56.421126Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-02T15:25:39.833Z"}}], "cna": {"title": "Consistent predictable generation of the password for the default admin user \"ONEDAY\" to the application services", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Armis Labs"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Copeland LP", "product": "E3 Supervisory Control", "versions": [{"status": "affected", "version": "0", "lessThan": "2.31F01", "versionType": "firmware"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1.", "supportingMedia": [{"type": "text/html", "value": "Upgrade firmware of affected E3 Supervisory Controls to a version > 2.30F1.<br>", "base64": false}]}], "datePublic": "2025-07-29T12:00:00.000Z", "references": [{"url": "https://www.armis.com/research/frostbyte10/"}], "workarounds": [{"lang": "en", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks.", "supportingMedia": [{"type": "text/html", "value": "Restrict access to the E3 Supervisory Controls network interface (ETH 0) by use of restricted VLAN or subnet and / or network firewall. Ensure the restricted VLAN or subnet is never accessible from untrusted networks.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.", "supportingMedia": [{"type": "text/html", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-522", "description": "CWE-522 Insufficiently Protected Credentials"}]}], "providerMetadata": {"orgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "shortName": "Armis", "dateUpdated": "2025-09-02T11:23:59.838Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6519", "state": "PUBLISHED", "dateUpdated": "2025-09-02T15:25:44.338Z", "dateReserved": "2025-06-23T13:29:43.161Z", "assignerOrgId": "dd59f033-460c-4b88-a075-d4d3fedb6191", "datePublished": "2025-09-02T11:23:59.838Z", "assignerShortName": "Armis"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "E3 Site Supervisor (firmware version < 2.31F01) has a default admin user \"ONEDAY\" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user."}], "id": "CVE-2025-6519", "lastModified": "2025-09-02T15:55:25.420", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "type": "Secondary"}]}, "published": "2025-09-02T12:15:38.607", "references": [{"source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "url": "https://www.armis.com/research/frostbyte10/"}], "sourceIdentifier": "dd59f033-460c-4b88-a075-d4d3fedb6191", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-522"}], "source": "dd59f033-460c-4b88-a075-d4d3fedb6191", "type": "Secondary"}]}