E3 Site Supervisor Control Password Generation Vulnerability in Linux Root Account
Vulnerability
A vulnerability exists in E3 Site Supervisor Control firmware versions prior to 2.31F01, where the root Linux password is generated at each boot. This allows an attacker to derive the root password for a vulnerable device using known or easily obtainable parameters.
Impact
Exploitation of this vulnerability allows for unauthorized access to the root account on the device, potentially leading to full control over the system.
Added: Sep 2, 2025, 12:33 PM
Updated: Sep 2, 2025, 4:24 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.0exploitability
5.7remediation
0.0relevance
0.5threat
4.8urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.