A AegiFlow
MEDIUMCVSS 5.3

CVE-2025-52543

CVE-2025-52543 updated by NVD

Modified
2026-10-25
Sources
nvd

Summary

E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.