CVE-2025-48415CWE-749

Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations

Medium · published May 21, 2025

CVSS v3.1
6.2
EPSS
0%
Percentile
12.1
In the wild
Unconfirmed
What it is

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor  or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00222 · 12.1th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2025-05-21T12:13Z
EPSS history
Timeline
  • 21 MAY 12:13Z
    Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations
    cvelistv5