Description
E3 Site Supervisor Control (firmware version < 2.31F01) contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the underlying OS.
Affected products
copeland: e3 supervisory controller firmware; copeland: site supervisor bx 860-1240; copeland: site supervisor bxe 860-1245; copeland: site supervisor cx 860-1260; copeland: site supervisor cxe 860-1265; copeland: site supervisor rx 860-1220; copeland: site supervisor rxe 860-1225; copeland: site supervisor sf 860-1200
References1
- www.armis.com/research/frostbyte10/ MitigationThird Party Advisory
Metrics
- CVSS 3.1
-
4.9
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - CVSS 4.0
-
6.9
MEDIUM
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 30 · as of 8 November 2026
- CWE
- CWE-1242
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.