CVE-2025-48415

Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations

Description

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor  or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.

Remediation

Solution:

  • The vendor has not yet released a patch or communicated a timeline for firmware updates.

Category

6.2
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.01%
Third-Party Advisory sec-consult.com
Affected: eCharge Hardy Barth cPH2 / cPP2 charging stations
Published at:
Updated at:

References

Link Tags
https://r.sec-consult.com/echarge third party advisory

Frequently Asked Questions

What is the severity of CVE-2025-48415?
CVE-2025-48415 has been scored as a medium severity vulnerability.
How to fix CVE-2025-48415?
To fix CVE-2025-48415: The vendor has not yet released a patch or communicated a timeline for firmware updates.
Is CVE-2025-48415 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2025-48415 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2025-48415?
CVE-2025-48415 affects eCharge Hardy Barth cPH2 / cPP2 charging stations.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.