Skip to content
OpenAdvisories
High ICSA-26-111-05 2 CVEs

Hardy Barth Salia EV Charge Controller (Update A)

Published Apr 21, 2026 · Updated Jul 30, 2026 · Revision 2

Vendor: hardy-barth Product: Salia Board Firmware

Summary

Successful exploitation of these vulnerabilities could crash the device being accessed; a buffer overflow condition may allow remote code execution.

Vulnerabilities 2

  • High 7.3
    CVE-2025-10371

    eCharge Hardy Barth Salia PLCC api.php unrestricted upload

    A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from …

    eCharge Hardy Barth Salia PLCC
  • Medium 6.3
    CVE-2025-5873

    eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload

    A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81. Affected by this issue is some unknown functionality of the file /firmware.php of the component Web UI. Performing a manipulation of the argument media results in unrestricted upload…

    eCharge Hardy Barth Salia PLCC

Revision history

  1. #2

    Update A - Added corrective actions taken by Hardy Barth as provided to BSI.

  2. #1

    Initial Publication

References