PT-2025-35552 · Unknown · E3 Site Supervisor Control

Armis Labs · CVE-2025-52543 · Published 2025-09-02 · Updated 2025-09-02

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions E3 Site Supervisor Control versions prior to 2.31F01

Description The E3 Site Supervisor Control application services (MGW and RCI) utilize client-side hashing for authentication. This allows an attacker to authenticate by obtaining only the password hash.

Recommendations Update E3 Site Supervisor Control to version 2.31F01 or later.

Fix

Weakness Enumeration

CWE-836

Related Identifiers

CVE-2025-52543

Affected Products

E3 Site Supervisor Control

References · 5

• https://osv.dev/vulnerability/CVE-2025-52543 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52543 · Security Note
• https://armis.com/research/frostbyte10 · Note
• https://t.me/CVEtracker/31497 · Telegram Post
• https://twitter.com/CVEnew/status/1962842485433991511 · Twitter Post