GCVE - cpe:2.3:o:hardy-barth:cph2_echarge_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:hardy-barth:cph2_echarge_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Hardy Barth (`a6094419-6295-58fd-9e23-7b801fbdb211`)
Product	Cph2 Echarge Firmware (`1883b867-707f-5eae-b31b-1239ace91287`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-11666`	vulnerable	2026-06-08 06:23:50.125639	Unauthenticated Remote Command Injection in eCharge Salia PLCC CRITICAL (9) Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verification is disabled everywhere. Therefore, remote unauthenticated users suitably positioned on the network between an EV charger controller and eCharge infrastructure can execute arbitrary commands with elevated privileges on affected devices. This issue affects cph2_echarge_firmware: through 2.0.4. Published: 2024-11-24T22:36:59.989Z Updated: 2024-11-25T01:28:57.027Z Open on db.gcve.eu Reference links https://www.onekey.com/resource/critical-vulnerabilities-in-ev-charging-stations-analysis-of-echarge-controllers	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-11665`	vulnerable	2026-06-08 06:23:50.122822	Unauthenticated Remote Command Injection HIGH (8.8) Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4. Published: 2024-11-24T22:32:43.427Z Updated: 2024-11-25T01:30:24.409Z Open on db.gcve.eu Reference links https://www.onekey.com/resource/critical-vulnerabilities-in-ev-charging-stations-analysis-of-echarge-controllers	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46360`	vulnerable	2026-06-08 06:12:45.083082	Details available Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges. Published: 2024-02-06T00:00:00.000Z Updated: 2026-07-09T00:28:43.513Z Open on db.gcve.eu Reference links https://www.offensity.com/en/blog/os-command-injection-in-cph2-charging-station-200-cve-2023-46359-and-cve-2023-46360/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-46359`	vulnerable	2026-06-08 06:12:45.081788	Details available An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature. Published: 2024-02-06T00:00:00.000Z Updated: 2026-07-09T00:28:42.280Z Open on db.gcve.eu Reference links https://www.offensity.com/en/blog/os-command-injection-in-cph2-charging-station-200-cve-2023-46359-and-cve-2023-46360/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.