PT-2025-22344 · Echarge Hardy Barth · Cph2 / Cpp2 Charging Stations

Published 2025-05-21 · Updated 2025-12-27 · CVE-2025-48415

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description A USB backdoor feature can be triggered by attaching a USB drive containing specially crafted salia.ini files. These files can contain commands that an attacker could exploit to export or modify device configuration, enable an SSH backdoor, or perform other administrative actions. This backdoor also allows arbitrary execution of OS commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-749

Related Identifiers

CVE-2025-48415

Affected Products

Cph2 / Cpp2 Charging Stations

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-48415 · Security Note
• https://twitter.com/VulmonFeeds/status/1925219900680765490 · Twitter Post
• https://r.sec-consult.com/echarge · Note
• https://t.me/cvetracker/24370 · Telegram Post
• http://seclists.org/fulldisclosure/2025/May/23 · Note
• https://twitter.com/CVEnew/status/2005031805016051926 · Twitter Post