PT-2025-29590 · Liteon · Ic48A+1

Murat Sagdullaev · CVE-2025-7357 · Published 2025-07-15 · Updated 2025-07-16

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LITEON IC48A firmware versions prior to 01.00.19r LITEON IC80A firmware versions prior to 01.01.12e

Description LITEON IC48A and IC80A EV chargers store FTP-server-access-credentials in cleartext in their system logs.

Recommendations Update LITEON IC48A firmware to version 01.00.19r or later. Update LITEON IC80A firmware to version 01.01.12e or later.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-7357

Affected Products

Ic48A

Ic80A

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-7357 · Security Note
• https://twitter.com/0dayPublishing/status/1945158687993045156 · Twitter Post
• https://twitter.com/CVEnew/status/1945562952146280751 · Twitter Post
• https://t.me/cvetracker/27985 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-196-03 · Note
• https://twitter.com/CveFindCom/status/1945546834660700511 · Twitter Post
• https://twitter.com/CveFindCom/status/1945546795964133779 · Twitter Post