Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-48414 EUVD-2025-15994GHSA-7v5f-m633-5wg2

Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations

Published May 21, 2025 · Updated Nov 3, 2025 · Assigned by SEC-VLab

Description

There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface.

Affected products

VendorProductAffectedFixed
eCharge Hardy Barth cPH2 / cPP2 charging stations <=2.2.0 —

References