Risk Letters

Exploited vulnerability

CVE-2023-46359

TLP:CLEAR

hardy-barth cph2_echarge_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

An OS command injection vulnerability in Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier, may allow an unauthenticated remote attacker to execute arbitrary commands on the system via a specifically crafted arguments passed to the connectivity check feature.

Facts

  • Vendor: hardy-barth
  • Product: cph2_echarge_firmware
  • EPSS (probability of exploitation within 30 days): 87.6 %
  • First known exploitation: 18 September 2026
  • First seen by Risk Letters: 18 September 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD