CVE-2023-46359: Hardy-Barth CPH2 Echarge Firmware

Critical severity, CVSS 9.8. EPSS: 87.6% chance of exploitation in the next 30 days.

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.

Affected products

• Hardy-Barth CPH2 Echarge Firmware: up to and including 1.87.0

Published 2024-02-06. Last modified 2026-07-09.