CVE-2025-52546
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS into the floorplan web page.
Risk Assessment
This may lead to execution of malicious script in the browsers of users visiting the floor plan page, potentially enabling session or data theft.
Recommendation
Update E3 Site Supervisor Control firmware to version 2.31F01 or later. Until updated, restrict access to the floor plan upload functionality.
Other vulnerabilities in E3 Site Supervisor Control
See all- CVE-2025-52548Medium
E3 Site Supervisor Control (firmware versions before 2.31F01) contains a hidden API call in application services that enables SSH and Shellinabox, which are disabled by default. An attacker with admin access to application services can use this API to enable remote access to the underlying OS.
- CVE-2025-52547High
E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services.
- CVE-2025-52545High
The RCI service in E3 Site Supervisor Control (firmware version < 2.31F01) contains an API call to read user info that returns all usernames and password hashes for application services.
- CVE-2025-52544High
E3 Site Supervisor Control (firmware < 2.31F01) has a floor plan feature that allows an unauthenticated attacker to upload files. By uploading a specially crafted file, an attacker can access any file from the E3 file system.
- CVE-2025-52543High
E3 Site Supervisor Control (firmware < 2.31F01) application services (MGW and RCI) use client-side hashing for authentication. An attacker can authenticate by obtaining only the password hash.
Original NVD description (English source)
E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenticated attacker to upload floor plan files. By uploading a specially crafted floor plan file, an attacker can inject a stored XSS to the floorplan web page.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS