CVE-2025-48413
Hard-coded OS root credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
- State
- Published
- Severity
- 7.7 High
- Published
- May 21, 2025
- Updated
- Nov 3, 2025
- Reserved
- May 20, 2025
Description
The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use the credentials to log into the device. Authentication can be performed via SSH backdoor or likely via physical access (UART shell).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | CISA-ADP |
Weaknesses
- CWE-798 Use of Hard-coded Credentials
Affected Products
| Product | Versions |
|---|---|
cPH2 / cPP2 charging stationseCharge Hardy Barth |
|
References
- https://r.sec-consult.com/echargethird-party-advisory
- http://seclists.org/fulldisclosure/2025/May/23
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.