CVE-2021-34601criticalCWE-259

CVE-2021-34601: falha crítica em Bender / ebee CC612

Bender Charge Controller: Hardcoded Credentials in Charge Controller

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CC612+ Monitorar CC613

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.1%
In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Bender / ebee · CC612Bender / ebee · CC613Bender / ebee · ICC15xxBender / ebee · ICC16xx
CVEs relacionadas — Bender / ebee CC612

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34602HIGHBender Charge Controller: Long URL could lead to webserver crashEPSS 1.4%CVE-2021-34592HIGHBender Charge Controller: Command injection via Web interfaceEPSS 1.4%CVE-2021-34589HIGHBender Charge Controller: RFID leakEPSS 1.0%CVE-2021-34587MEDIUMBender Charge Controller: Long URL could lead to webserver crashEPSS 0.9%CVE-2021-34588HIGHBender Charge Controller: Unprotected data exportEPSS 0.9%CVE-2021-34590MEDIUMBender Charge Controller: Cross-site ScriptingEPSS 0.5%