CVE-2025-52547 HIGH

CVE-2025-52547: DoS to the application services

Vendor Copeland Lp
Product E3 Supervisory Control
Weakness CWE-20 · Input validation
Published September 2, 2025
Last update September 2, 2025
View on NVD All CVEs

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services.

Key dates

02Disclosure timeline

September 2, 2025 CVE published
September 2, 2025 Record updated