Description
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .
Scores
CVSS v3
8.6
EPSS
0.0028
EPSS Percentile
51.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Details
CWE
CWE-425
Status
published
Products (2)
bender/cc612_firmware
5.11.0 - 5.11.2
bender/icc15xx_firmware
5.11.0 - 5.11.2
Published
Apr 27, 2022
Tracked Since
Feb 18, 2026