TI-2021-13619 CVE-2021-34601 · GHSA-mrf8-4j8f-g2hr
Bender Charge Controller: Hardcoded Credentials in Charge Controller
Priority MEDIUM 44
In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials.
Bender / ebee
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Bender / ebee records in CISA KEVNo Bender / ebee vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2021-13620 CVE-2021-34602 · GHSA-g9fr-9797-g6c3
Bender Charge Controller: Long URL could lead to webserver crash
Priority MEDIUM 41
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.
TI-2021-13610 CVE-2021-34592 · GHSA-p4mq-j63q-grfw
Bender Charge Controller: Command injection via Web interface
Priority MEDIUM 41
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.
TI-2019-14334 CVE-2019-19885 · GHSA-xx4g-qrfc-m589
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the…
Priority MEDIUM 41
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.
TI-2025-27645 CVE-2025-41682 · GHSA-mxg6-f57q-5xh5
Credential Disclosure via Insecure Storage on Charge Controller
Priority MEDIUM 40
An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.
TI-2021-13606 CVE-2021-34588 · GHSA-m4qj-mfxh-2v5c
Bender Charge Controller: Unprotected data export
Priority LOW 39
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export.
TI-2021-13607 CVE-2021-34589 · GHSA-c36w-9wvv-9rh6
Bender Charge Controller: RFID leak
Priority LOW 35
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak.
TI-2025-27671 CVE-2025-41708 · GHSA-mhvx-p45m-25xf
Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface
Priority LOW 34
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface.
TI-2021-13609 CVE-2021-34591 · GHSA-27j2-98fj-7r5w
Bender Charge Controller: Local privilege Escalation
Priority LOW 34
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation.
TI-2021-13605 CVE-2021-34587 · GHSA-47xc-94f4-86xr
Bender Charge Controller: Long URL could lead to webserver crash
Priority LOW 26
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash.
TI-2021-13608 CVE-2021-34590 · GHSA-93jw-9wg6-48pf
Bender Charge Controller: Cross-site Scripting
Priority LOW 25
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting.
Priority LOW 24
A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators.