Auth bypass in Copeland Lp E2 Facility Management System
CVE-2025-52551
E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system.
Vulnerability class: Broken Authentication
EPSS: 0.003 (27.7th percentile) — read the EPSS interpretation.
Affected products
- Copeland Lp E2 Facility Management System — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-52551?
- CVE-2025-52551 is a vulnerability in Copeland Lp E2 Facility Management System, classified under Missing Authentication for Critical Function. Published 2025-09-02.
- Is CVE-2025-52551 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.