eCharge Hardy Barth vulnerabilities
We track 6 vulnerabilities in eCharge Hardy Barth products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2025.
Latest eCharge Hardy Barth vulnerabilities
- 7.3 High severity
Salia PLCC: Improper Access Control
A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from r
- 8.8 High severity
cPH2: Improper Neutralization of Special Elements used in an OS Command
eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is
- 8.8 High severity
cPH2: Improper Neutralization of Special Elements used in an OS Command
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authent
- 8.8 High severity
cPH2: Improper Neutralization of Special Elements used in an OS Command
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentica
- 8.1 High severity
cPH2 / cPP2 charging stations: Hidden Functionality
An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via
- 7.7 High severity
cPH2 / cPP2 charging stations: Use of Hard-coded Credentials
The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user. The credentials are shipped with the update files. There is no option for deleting or changing their passwords for an enduser. An attacker can use