Kehua Charging Pile Cloud Platform home improper authentication_CVE-2025-8348

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Description

A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability affects unknown code of the file /home. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Basic Information

ID CVE-2025-8348

Source VulDB

Published Jul 31, 2025 at 03:32

Modified Jul 31, 2025 at 14:33

Affected Product

Vendor Kehua

Product Charging Pile Cloud Platform

Version 1.0

Affected Versions Kehua Charging Pile Cloud Platform 1.0

CWE Classification

CWE-287

References

{
    "lastseen": "",
    "description": "A vulnerability has been found in Kehua Charging Pile Cloud Platform 1.0 and classified as critical. This vulnerability affects unknown code of the file /home. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
    "published": "2025-07-31T03:32:05.773Z",
    "modified": "2025-07-31T14:33:19.305Z",
    "type": "cve",
    "title": "Kehua Charging Pile Cloud Platform home improper authentication",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.318298\nhttps://vuldb.com/?ctiid.318298\nhttps://vuldb.com/?submit.617568\nhttps://github.com/qiantx/cve/blob/main/cve3.md",
    "id": "CVE-2025-8348",
    "bulletinFamily": "",
    "cwe": [
        "CWE-287"
    ],
    "cvelist": null,
    "sourceData": "Kehua Charging Pile Cloud Platform 1.0",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Charging Pile Cloud Platform",
    "version": "1.0",
    "vendor": "Kehua",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}