CVE-2025-52548
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
Vendor
Product
CWE
Yayın Tarihi
2025-09-02 12:15:37
Güncelleme
2025-10-01 18:25:16
Source Identifier
dd59f033-460c-4b88-a075-d4d3fedb6191
KEV Date Added
-