CVE-2025-48414— Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-48414
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
Source: NVD (National Vulnerability Database)
Vulnerability Description
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用硬编码的凭证
Source: NVD (National Vulnerability Database)
Vulnerability Title
eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2 信任管理问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2都是eCharge公司的一款电动汽车充电站。 eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2存在信任管理问题漏洞，该漏洞源于Web界面脚本使用硬编码凭据，可能提供额外攻击面。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| eCharge Hardy Barth | cPH2 / cPP2 charging stations | <=2.2.0 | - |
II. Public POCs for CVE-2025-48414
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-48414
请登录查看更多情报信息。
Same Patch Batch · eCharge Hardy Barth · 2025-05-21 · 7 CVEs total
| CVE-2025-27804 | OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-27803 | Missing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48413 | Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48416 | Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48415 | Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48417 | Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 |
IV. Related Vulnerabilities
Same product: cPH2 / cPP2 charging stations
- CVE-2025-48417
Hard-Coded Certificate and Private Key for HTTPS Web Interfa - CVE-2025-48416
Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / - CVE-2025-48415
Backdoor Functionality via USB Drive in eCharge Hardy Barth - CVE-2025-48413
Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / - CVE-2025-27804
OS Command Injection Vulnerability in eCharge Hardy Barth cP
Same vendor: eCharge Hardy Barth
- CVE-2025-10371
eCharge Hardy Barth Salia PLCC api.php unrestricted upload - CVE-2025-5873
eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestric - CVE-2025-3883
eCharge Hardy Barth cPH2 index.php Command Injection Remote - CVE-2025-3882
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Inject - CVE-2025-3881
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection
Same weakness: CWE-798
- CVE-2026-7414
Hardcoded credentials in Yarbo robot firmware - CVE-2026-8032
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-cod - CVE-2026-32834
Easy PayPal Events & Tickets 1.3 Authentication Bypass via Q - CVE-2026-42376
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials - CVE-2026-42375
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
V. Comments for CVE-2025-48414
No comments yet