Bender cc613 firmware vulnerabilities

Latest Bender cc613 firmware CVEs

Newest publication first

1. CVE-2021-34589 Bender Charge Controller: RFID leak

   Published 2022-04-27

   High·CVSS 7.5 EPSS 0.99%

   In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

2. CVE-2021-34587 Bender Charge Controller: Long URL could lead to webserver crash

   Published 2022-04-27

   Medium·CVSS 5.3 EPSS 0.92%

   In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.