A AegiFlow
HIGHCVSS 7.7

CVE-2025-52545

CVE-2025-52545 updated by NVD

Modified
2026-10-25
Sources
nvd

Summary

E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.