CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.9. It may be remotely exploitable.
CVE
CVE-2025-52548
Severity
MEDIUM
CVSS
4.9
EPSS
0.34%
Original NVD Description
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)