CVE-2025-7357CWE-256

Plaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers

High · published July 16, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00423 · 35.5th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-07-16T15:56Z
EPSS history
Timeline
  • 16 JUL 15:56Z
    Plaintext Storage of a Password in LITEON IC48A and IC80A EV Chargers
    cvelistv5