Vulnerability Details CVE-2021-34588
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.9%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 5.0
References
Products affected by CVE-2021-34588
-
cpe:2.3:h:bender:cc612:-
-
cpe:2.3:h:bender:cc613:-
-
cpe:2.3:o:bender:cc612_firmware:*
-
cpe:2.3:o:bender:cc612_firmware:5.11.0
-
cpe:2.3:o:bender:icc15xx_firmware:*