CVE Details
Basic Information
| Title | CVE-2025-48415 Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations |
|---|---|
| Type | cve |
| Published | 2025-05-21T12:13:14 |
| Last Seen | 2025-05-21T12:49:33 |
CVSS Information
| Base Score | 0.0 () |
|---|---|
| Attack Vector | |
| Attack Complexity | |
| Privileges Required | |
| User Interaction | |
| Scope | |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A USB backdoor in eCharge Hardy Barth cPH2 / cPP2 charging stations allows attackers to execute arbitrary commands via specially crafted salia.ini files on a USB drive. The vulnerability can be exploited to export sensitive data, modify configurations, or execute malicious code. |
|---|---|
| AI Severity | High |
| Vendor | eCharge Hardy Barth |
| Product | cPH2 / cPP2 |
| Affected Version |
Additional Information
| CVE List | CVE-2025-48415 |
|---|---|
| CWE List | CWE-749 |
| Bulletin Family | cve |
Description
A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export…
CVSS Score Summary
Base Score: %!f(string=#) ()