What is CVE-2025-48416?

CVE-2025-48416 is a high-severity vulnerability in Echarge Hardy Barth Cph2 / Cpp2 Charging Stations, classified under Hidden Functionality. CVSS score: 8.1/10. Published 2025-05-21.

How severe is CVE-2025-48416?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Echarge Hardy Barth Cph2 / Cpp2 Charging Stations

CVE-2025-48416

An OpenSSH daemon listens on TCP port 22. There is a hard-coded entry in the "/etc/shadow" file in the firmware image for the "root" user. However, in the default SSH configuration the "PermitRootLogin" is disabled, preventing the root user from logging in via SSH. This configuration can be bypassed/changed by an attacker through multiple paths though.

EPSS: 0.005 (41.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Echarge Hardy Barth Cph2 / Cpp2 Charging Stations — versions <=2.2.0

Weakness classification (CWE)

CWE-912 — Hidden Functionality

References

551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2025-48416?: CVE-2025-48416 is a high-severity vulnerability in Echarge Hardy Barth Cph2 / Cpp2 Charging Stations, classified under Hidden Functionality. CVSS score: 8.1/10. Published 2025-05-21.
How severe is CVE-2025-48416?: High severity. CVSS v3 base score is 8.1 out of 10.