CVEs published by Armis

CVEs published by Armis (CVE Numbering Authority). 6 tracked.

CVE-2025-52547 HIGH 7.5 UPGRADE E3 Site Supervisor Control (firmware version < 2.31F01) MGW contains an API call that lacks input validation
CVE-2025-52546 MEDIUM 6.1 UPGRADE E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenti
CVE-2025-6519 CRITICAL 9.8 UPGRADE E3 Site Supervisor (firmware version < 2.31F01) has a default admin user "ONEDAY" with a daily generated passw
CVE-2025-52544 HIGH 7.5 UPGRADE E3 Site Supervisor Control (firmware version < 2.31F01) has a floor plan feature that allows for an unauthenti
CVE-2025-52543 HIGH 7.5 UPGRADE E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side ha
CVE-2025-52545 HIGH 7.5 UPGRADE E3 Site Supervisor Control (firmware version < 2.31F01) RCI service contains an API call to read users info, w