CVE Details
Basic Information
| Title | CVE-2025-27803 Missing Authentication in eCharge Hardy Barth cPH2 / cPP2 charging stations |
|---|---|
| Type | cve |
| Published | 2025-05-21T11:29:15 |
| Last Seen | 2025-05-21T11:59:48 |
CVSS Information
| Base Score | 0.0 () |
|---|---|
| Attack Vector | |
| Attack Complexity | |
| Privileges Required | |
| User Interaction | |
| Scope | |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A vulnerability in eCharge Hardy Barth cPH2 and cPP2 charging stations allows attackers with network access to gain administrative control due to missing authentication mechanisms in the web interface and MQTT server. |
|---|---|
| AI Severity | Critical |
| Vendor | eCharge |
| Product | eCharge Hardy Barth cPH2 / cPP2 charging stations |
| Affected Version | Unknown |
Additional Information
| CVE List | CVE-2025-27803 |
|---|---|
| CWE List | CWE-306 |
| Bulletin Family | cve |
Description
The devices do not implement any authentication for the web interface or the MQTT server. An attacker who has network access to the device immediately gets administrative access to the devices and can…
CVSS Score Summary
Base Score: %!f(string=#) ()