Cph2 / Cpp2 Charging Stations
Approved changes feed: RSS · Atom
cpe:2.3:a:echarge_hardy_barth:cph2_/_cpp2_charging_stations:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Echarge Hardy Barth (d8bba6f6-8ea7-5624-92ea-1f88457320e2) |
|---|---|
| Product | Cph2 / Cpp2 Charging Stations (2d044ba2-7a0e-5d58-8c15-8d0c6fa005a3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-48417 |
vulnerable | 2026-06-08 07:27:15.788411 |
Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stations
The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files. An attacker can use the private key to perform man-in-the-middle attacks against users of the admin interface. The files are located in /etc/ssl (e.g. salia.local.crt, salia.local.key and salia.local.pem). There is no option to upload/configure custom TLS certificates.
Published: 2025-05-21T12:30:08.012Z
Updated: 2025-11-03T20:04:52.170Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48416 |
vulnerable | 2026-06-08 07:27:15.788003 |
Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though.
Published: 2025-05-21T12:15:02.694Z
Updated: 2025-11-03T20:04:50.778Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48415 |
vulnerable | 2026-06-08 07:27:15.787733 |
Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations
A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.
Published: 2025-05-21T12:13:14.475Z
Updated: 2025-11-03T20:04:49.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48414 |
vulnerable | 2026-06-08 07:27:15.787440 |
Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface.
Published: 2025-05-21T11:40:50.424Z
Updated: 2025-11-03T20:04:48.022Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48413 |
vulnerable | 2026-06-08 07:27:15.786981 |
Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device. Authentication can be performed via SSH backdoor or likely via physical access (UART shell).
Published: 2025-05-21T11:39:19.438Z
Updated: 2025-11-03T20:04:46.631Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27804 |
vulnerable | 2026-06-08 07:14:55.730166 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27803 |
vulnerable | 2026-06-08 07:14:55.729816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.