PT-2025-22331 · Echarge Hardy Barth · Cph2 / Cpp2 Charging Stations

Published 2025-05-21 · Updated 2025-05-21 · CVE-2025-27803

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue concerns a lack of authentication for the web interface or the MQTT server. This allows an attacker with network access to gain administrative access, perform arbitrary administrative actions, and potentially access sensitive data. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-27803

Affected Products

Cph2 / Cpp2 Charging Stations

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-27803 · Security Note
• https://twitter.com/VulmonFeeds/status/1925258292344877437 · Twitter Post
• https://r.sec-consult.com/echarge · Note
• http://seclists.org/fulldisclosure/2025/May/23 · Note
• https://twitter.com/CVEnew/status/1925154472767954976 · Twitter Post