Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Bender / ebee records in CISA KEVNo Bender / ebee vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 44
In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01084 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-259
Priority MEDIUM 41
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01391 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-78
Priority MEDIUM 41
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01391 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-77
Priority LOW 39
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00904 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-425
Priority LOW 35
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0099 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-200
Priority LOW 34
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00232 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-250
Priority LOW 26
In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00915 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-121
Priority LOW 25
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00451 · Published 2022-04-27 · Fixed in 5.11.2, 5.12.5 +2 CWE-79
Open these records in search →