Backdoor Functionality via USB Drive in eCharge Hardy Barth cPH2 / cPP2 charging stations
Vulnerability Description
A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-48415
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Stefan Viehböck | SEC Consult Vulnerability Lab
References
More from eCharge Hardy Barth
View All →Affected Vendor
eCharge Hardy Barth
View all reports →