Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-41682

Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc613 Icc13xx and 1 more
CVE-2025-41708

Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc613 Icc13xx and 2 more