Vulnerabilities

A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81.

A vulnerability was detected in eCharge Hardy Barth Salia PLCC up to 2.3.81.

eCharge Hardy Barth cPH2 index.php Command Injection Remote Code Execution Vulnerability.

eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability.

eCharge Hardy Barth cPH2 check_req.php ntp Command Injection Remote Code Execution Vulnerability.

The certificate and private key used for providing transport layer security for connections to the web interface (TCP port 443) is hard-coded in the firmware and are shipped with the update files.

An OpenSSH daemon listens on TCP port 22.

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files.

There are several scripts in the web interface that are accessible via undocumented hard-coded credentials.

The `/etc/passwd` and `/etc/shadow` files reveal hard-coded password hashes for the operating system "root" user.

Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script.

The devices do not implement any authentication for the web interface or the MQTT server.

Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run.

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affects cph2_echarge_firmware: through 2.0.4.

Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges.

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted argum…