← Back

CVE-2021-34588

nvd nist
Published: Apr 27, 2022Modified: Jun 17, 2026

JSON object

Loading...
8.6
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 4.0
Source: NVD

Description

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

Affected (8)

Bender
2 products
Cc612 Firmware
Icc15xx Firmware
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bender
Cc612 Firmware
From 5.11.0 to 5.11.2
Cc612 Firmware
From 5.12.0 to 5.12.5
Cc612 Firmware
From 5.13.0 to 5.13.2
Cc612 Firmware
From 5.20.0 to 5.20.2
Running on/withPlatform Versions
Bender
Cc612
All versions
Configuration D
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Bender
Icc15xx Firmware
From 5.11.0 to 5.11.2
Icc15xx Firmware
From 5.12.0 to 5.12.5
Icc15xx Firmware
From 5.13.0 to 5.13.2
Icc15xx Firmware
From 5.20.0 to 5.20.2
Running on/withPlatform Versions
Bender
Cc613
All versions

Related CWEs

CWE-425
Direct Request ('Forced Browsing')
The web application does not adequately enforce appropriate authorization on all restricted URLs, scripts, or files.

References (2)

Source: info@cert.vde.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.