CVE-2025-6519 Consistent predictable generation of the password for the default admin user "ONEDAY" to the application services
Attackers can predict the daily password for the immutable ONEDAY admin user, gaining unauthorized access to E3 Site Supervisor services.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6519?
CVE-2025-6519 is a critical vulnerability in Copeland LP E3 Supervisory Control, published on 2 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated password. An attacker can predictably generate the password for ONEDAY. The oneday user cannot be deleted or modified by any user.
Weakness: CWE-522
Which versions are affected by CVE-2025-6519?
It affects 1 product.
Products include Copeland E3 Supervisory Controller Firmware.
How do I fix CVE-2025-6519?
No fix has been published for CVE-2025-6519 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-6519 being exploited?
There is no known exploitation of CVE-2025-6519 in the wild and no public exploit code.
Other vulnerabilities in Copeland LP E3 Supervisory Control
Sources
Also known as GHSA-48q9-vxr9-j39f.