PT-2025-35558 · Unknown · E3 Site Supervisor Control

Armis Labs · Published 2025-09-02 · Updated 2025-09-02 · CVE-2025-52549

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions E3 Site Supervisor Control versions prior to 2.31F01

Description The E3 Site Supervisor Control generates the root Linux password on each boot. An attacker can generate the root Linux password for a vulnerable device based on known or easily obtainable parameters.

Recommendations Update to version 2.31F01 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2025-52549

Affected Products

E3 Site Supervisor Control

References · 5

• https://osv.dev/vulnerability/CVE-2025-52549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52549 · Security Note
• https://armis.com/research/frostbyte10 · Note
• https://t.me/CVEtracker/31503 · Telegram Post
• https://twitter.com/CVEnew/status/1962842479008284939 · Twitter Post