Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2025-41682

Credential Disclosure via Insecure Storage on Charge Controller

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc613 Icc13xx and 1 more
CVE-2025-41708

Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc613 Icc13xx and 2 more
CVE-2021-34589

Bender Charge Controller: RFID leak

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 6 more
CVE-2021-34587

Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bender Ibm
Products
Cc612 Cc612 Firmware Cc613 and 6 more