Description
Salia PLCC 是一款未知系统。在其 /firmware.php 接口中发现了一个文件上传漏洞，攻击者可以通过该漏洞上传恶意文件（如 webshell），从而获取服务器权限，导致系统安全受到严重威胁。
Salia PLCC /firmware.php 文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/YZS17/CVE/blob/main/Salia_PLCC/Salia_PLCC_Slave_v2.2.0_File_Upload.md
https://mrxn.net/jswz/salia-firmware-upload-rce.html
https://cn-sec.com/archives/5065570.html
https://nvd.nist.gov/vuln/detail/CVE-2025-5873
https://www.isssource.com/no-fix-for-hardy-barth-salia-ev-charge-controller/
https://www.cve.org/CVERecord?id=CVE-2025-5873
https://www.cvedetails.com/cve/CVE-2025-5873/