Vendors / eCharge Hardy Barth Records 16 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 7
Exploited now eCharge Hardy Barth records in CISA KEV No eCharge Hardy Barth vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 84
An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted argum…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.87608 · Published 2024-02-06 · No fix listed CWE-78
Priority HIGH 73
Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02773 · Published 2024-02-06 · No fix listed CWE-250
Priority MEDIUM 64
A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00377 · Published 2025-09-13 · No fix listed CWE-284
Priority MEDIUM 57
A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2025-06-09 · No fix listed CWE-284
Priority MEDIUM 49
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01262 · Published 2024-11-24 · No fix listed CWE-77
Priority MEDIUM 43
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00433 · Published 2024-11-24 · No fix listed CWE-345
Priority MEDIUM 41
eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00688 · Published 2025-05-22 · No fix listed CWE-78
Priority MEDIUM 41
eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00688 · Published 2025-05-22 · No fix listed CWE-78
Priority MEDIUM 41
eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.
CVSS 3.0 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00688 · Published 2025-05-22 · No fix listed CWE-78
Priority LOW 38
An OpenSSH daemon listens on TCP port 22.
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.0057 · Published 2025-05-21 · No fix listed CWE-912
Priority LOW 35
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-05-21 · No fix listed CWE-798
Priority LOW 35
The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user.
CVSS 3.1 HIGH 7.7· Local · No auth · No interaction · EPSS 0.00229 · Published 2025-05-21 · No fix listed CWE-798
Priority LOW 34
The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00216 · Published 2025-05-21 · No fix listed CWE-321
Priority LOW 33
Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01008 · Published 2025-05-21 · No fix listed CWE-78
Priority LOW 29
The devices do not implement any authentication for the web interface or the MQTT server.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.0045 · Published 2025-05-21 · No fix listed CWE-306
Priority LOW 27
A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files.
CVSS 3.1 MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00222 · Published 2025-05-21 · No fix listed CWE-749
Open these records in search → All records by CVSS severity
2 7 7 0 0
THREATIST.IORead the docs