high7.5
CVE-2021-34589
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak.
Impact
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bender | Cc612 Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Cc613 Firmware | from 5.11.0 before 5.11.2 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc613 Firmware | from 5.12.0 before 5.12.5 |
| Bender | Icc15xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc16xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |