Skip to content
OpenAdvisories

Product · eCharge Hardy Barth

cPH2 / cPP2 charging stations

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2025-48416

    Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations

    An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in vi…

    eCharge Hardy Barth cPH2 / cPP2 charging stations
  • High 7.7
    CVE-2025-48413

    Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

    The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can us…

    eCharge Hardy Barth cPH2 / cPP2 charging stations