{"id":"CVE-2025-27804","aliases":["EUVD-2025-15995","GHSA-xw2w-jc5r-g6r7"],"status":"published","title":"OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations","description":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.01008,"percentile":0.63488,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2025-05-21T11:35:11Z","modified":"2026-06-17T09:04:15Z","products":[{"vendor":"echarge hardy barth","product":"cph2 / cpp2 charging stations"}],"references":[{"url":"https://r.sec-consult.com/echarge","tags":["third-party-advisory"]},{"url":"http://seclists.org/fulldisclosure/2025/May/23"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27804"},{"url":"https://github.com/advisories/GHSA-xw2w-jc5r-g6r7"}],"sources":{"cve":[{"id":"CVE-2025-27804","title":"OS Command Injection Vulnerability in eCharge Hardy Barth cPH2 / cPP2 charging stations","description":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.","status":"published","published":"2025-05-21T11:35:11.94Z","modified":"2025-11-03T19:46:30.147Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-15995","description":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.","status":"published","published":"2025-05-21T11:35:11Z","modified":"2025-11-03T19:46:30Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-xw2w-jc5r-g6r7","title":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt...","description":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.","status":"published","published":"2025-05-21T18:33:29Z","modified":"2025-11-03T21:35:02Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:04:25.4654Z"}],"nvd":[{"id":"CVE-2025-27804","description":"Several OS command injection vulnerabilities exist in the device firmware in the /var/salia/mqtt.php script. By publishing a specially crafted message to a certain MQTT topic arbitrary OS commands can be executed with root permissions.","status":"published","published":"2025-05-21T12:16:21.283Z","modified":"2026-06-17T09:04:15.26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:11:09.125937Z"}]}}