CVE-2025-48414 — Hard-coded web interface credentials in eCharge Hardy Barth cPH2 / cPP2 charging stations
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functio…
Published: 2025-05-21 · CVSS: 6.5 · CVSS 3.1
There are several scripts in the web interface that are accessible via undocumented hard-coded credentials. The scripts provide access to additional administrative/debug functionality and are likely intended for debugging during development and provides an additional attack surface.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7