eCharge Hardy Barth USB Backdoor Vulnerability Allowing OS Command Execution

A USB backdoor vulnerability has been identified in eCharge Hardy Barth cPH2 and cPP2 charging stations, specifically in version 2.2.0. This vulnerability can be exploited by attaching a USB drive containing specially crafted 'salia.ini' files. These .ini files can include various 'commands' that an attacker could use to export or modify the device configuration, enable an SSH backdoor, or perform other administrative actions. Ultimately, this backdoor allows for arbitrary execution of operating system commands.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of device settings, activation of backdoor access via SSH, and execution of arbitrary commands on the operating system, potentially compromising the device's integrity and functionality.