CVE-2025-27804: medium-severity vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging…
OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.0%
Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
eCharge Hardy Barth · cPH2 / cPP2 charging stationsRelated CVEs — eCharge Hardy Barth cPH2 / cPP2 charging…
In the same product, most dangerous first.
CVE-2025-48416HIGHBackdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.6%CVE-2025-27803MEDIUMMissing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.4%CVE-2025-48414MEDIUMHard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.3%CVE-2025-48413HIGHHard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.2%CVE-2025-48415MEDIUMBackdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.2%CVE-2025-48417MEDIUMHard-Coded Certificate and Private Key for HTTPS Web Interface in eCharge Hardy Barth cPH2 / cPP2 charging stationsEPSS 0.2%