E3 Site Supervisor Default Admin Password Vulnerability in Firmware Versions Prior to 2.31F01

A vulnerability exists in E3 Site Supervisor firmware versions prior to 2.31F01, where a default admin user named 'ONEDAY' is assigned a password that is generated daily. This predictable password generation allows an attacker to easily anticipate the password for the 'ONEDAY' user. Additionally, the 'ONEDAY' user cannot be deleted or modified by any user.

Impact

Exploitation of this vulnerability allows for unauthorized access to the admin account 'ONEDAY', potentially leading to elevated privileges and unauthorized actions within the application.