Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2021-34602

Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields that are executed with root privileges.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34601

Bender Charge Controller: Hardcoded Credentials in Charge Controller

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34592

Bender Charge Controller: Command injection via Web interface

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34591

Bender Charge Controller: Local privilege Escalation

In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34590

Bender Charge Controller: Cross-site Scripting

In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34589

Bender Charge Controller: RFID leak

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 6 more
CVE-2021-34588

Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34587

Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bender Ibm
Products
Cc612 Cc612 Firmware Cc613 and 6 more