(0Day) eCharge Hardy Barth cPH2 nwcheckexec.php dest Command Injection Remote Code Execution Vulnerability
Vulnerability Details
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of eCharge Hardy Barth cPH2 charging stations. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of the dest parameter provided to the nwcheckexec.php endpoint. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the www-data user.
Additional Details
03/14/24 – ZDI contacted the vendor via email to info@echarge.de
10/28/24 – ZDI reached out to echarge’s support team
04/12/25 – ZDI informed the vendor that since we have not received a response, we will publish the report as a zero-day advisory
Disclosure Timeline
- 2025-03-11 - Vulnerability reported to vendor
- 2025-04-23 - Coordinated public release of advisory
- 2025-04-23 - Advisory Updated
Credit
adhkr - LuwakLab
