high8.6
CVE-2021-34588
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export.
Impact
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bender | Cc612 Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc15xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |