CVE-2025-48416 Backdoor Functionality via SSH in eCharge Hardy Barth cPH2 / cPP2 charging stations
Attackers can bypass SSH restrictions to use hardcoded root credentials, gaining privileged access to eCharge Hardy Barth charging stations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48416?
CVE-2025-48416 is a high-severity vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations, published on 21 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though.
Weakness: CWE-912
Which versions are affected by CVE-2025-48416?
How do I fix CVE-2025-48416?
No fix has been published for CVE-2025-48416 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-48416 being exploited?
There is no known exploitation of CVE-2025-48416 in the wild and no public exploit code.
Sources
Also known as GHSA-rcv8-vxjp-vqcw.