Copeland LP vulnerabilities

Newest CVEs

• CVE-2025-52551

  Proprietary protocol allows for unauthenticated file operations

  Copeland LP · E2 Facility Management System

  Critical9.3
• CVE-2025-52550

  Firmware upgrade packages are unsigned

  Copeland LP · E3 Supervisory Control

  High8.6
• CVE-2025-52549

  Predictable root linux password generation

  Copeland LP · E3 Supervisory Control

  Critical9.2
• CVE-2025-52548

  Enabling SSH and Shellinabox on the vulnerable machine

  Copeland LP · E3 Supervisory Control

  Medium6.9
• CVE-2025-52547

  DoS to the application services

  Copeland LP · E3 Supervisory Control

  High8.7
• CVE-2025-52546

  Stored XSS by uploading a specially crafted floor plan file

  Copeland LP · E3 Supervisory Control

  Medium5.1
• CVE-2025-52545

  Privilege escalation in the application services

  Copeland LP · E3 Supervisory Control

  High7.7
• CVE-2025-52544

  Arbitrary read file from the filesystem

  Copeland LP · E3 Supervisory Control

  High8.8
• CVE-2025-52543

  Login to the application services using only the password hash

  Copeland LP · E3 Supervisory Control

  Medium5.3
• CVE-2025-6519

  Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services

  Copeland LP · E3 Supervisory Control

  Critical9.3