Threat Investigation
Request a demo

CVE-2025-7357

High

Description

LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs.

SeverityHigh
CVSS8.7
Exploit probability—
ProductIC48A EV Charger
PublishedJul 16, 2025
First seenJul 16, 2025
Weakness typeCWE-256CWE-256

How to fix

Update
  • LITEON IC48A EV Charger01.00.19r or later
  • LITEON IC80A EV Charger01.01.12e or later

Affected products

ProductAffected versionsFixed in
LITEON IC48A EV Chargerv < 01.00.19r01.00.19r
LITEON IC80A EV Chargerv < 01.01.12e01.01.12e

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.