CVE-2025-48416— Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-48416
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
Source: NVD (National Vulnerability Database)
Vulnerability Description
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
隐藏功能
Source: NVD (National Vulnerability Database)
Vulnerability Title
eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2都是eCharge公司的一款电动汽车充电站。 eCharge Hardy Barth cPH2和eCharge Hardy Barth cPP2存在安全漏洞，该漏洞源于/etc/shadow文件包含root用户硬编码条目，可能被绕过SSH配置限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| eCharge Hardy Barth | cPH2 / cPP2 charging stations | <=2.2.0 | - |
II. Public POCs for CVE-2025-48416
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-48416
请登录查看更多情报信息。
Same Patch Batch · eCharge Hardy Barth · 2025-05-21 · 7 CVEs total
| CVE-2025-27804 | OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-27803 | Missing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48413 | Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48414 | Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48415 | Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations | |
| CVE-2025-48417 | Hard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 |
IV. Related Vulnerabilities
Same product: cPH2 / cPP2 charging stations
- CVE-2025-48417
Hard-Coded Certificate and Private Key for HTTPS Web Interfa - CVE-2025-48415
Backdoor Functionality via USB Drive in eCharge Hardy Barth - CVE-2025-48414
Hard-coded web interface credentials in eCharge Hardy Barth - CVE-2025-48413
Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / - CVE-2025-27804
OS Command Injection Vulnerability in eCharge Hardy Barth cP
Same vendor: eCharge Hardy Barth
- CVE-2025-10371
eCharge Hardy Barth Salia PLCC api.php unrestricted upload - CVE-2025-5873
eCharge Hardy Barth Salia PLCC Web UI firmware.php unrestric - CVE-2025-3883
eCharge Hardy Barth cPH2 index.php Command Injection Remote - CVE-2025-3882
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Inject - CVE-2025-3881
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection
Same weakness: CWE-912
V. Comments for CVE-2025-48416
No comments yet