Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Bender / ebee Component: Cc612 Firmware Clear all filters
TI-2021-13610 CVE-2021-34592 · GHSA-p4mq-j63q-grfw

Bender Charge Controller: Command injection via Web interface

Priority MEDIUM 41

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01391 Published 2022-04-27 Fixed in 5.11.2, 5.12.5 +2 CWE-77
TI-2021-13609 CVE-2021-34591 · GHSA-27j2-98fj-7r5w

Bender Charge Controller: Local privilege Escalation

Priority LOW 34

In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2022-04-27 Fixed in 5.11.2, 5.12.5 +2 CWE-250
TI-2021-13608 CVE-2021-34590 · GHSA-93jw-9wg6-48pf

Bender Charge Controller: Cross-site Scripting

Priority LOW 25

In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00451 Published 2022-04-27 Fixed in 5.11.2, 5.12.5 +2 CWE-79
TI-2021-13607 CVE-2021-34589 · GHSA-c36w-9wvv-9rh6

Bender Charge Controller: RFID leak

Priority LOW 35

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0099 Published 2022-04-27 Fixed in 5.11.2, 5.12.5 +2 CWE-200
TI-2021-13606 CVE-2021-34588 · GHSA-m4qj-mfxh-2v5c

Bender Charge Controller: Unprotected data export

Priority LOW 39

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00904 Published 2022-04-27 Fixed in 5.11.2, 5.12.5 +2 CWE-425