Vulnerabilities > Bender
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-04-27 | CVE-2021-34587 | Out-of-bounds Write vulnerability in multiple products In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. | 5.3 |
| 2022-04-27 | CVE-2021-34588 | Unspecified vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. | 8.6 |
| 2022-04-27 | CVE-2021-34589 | Unspecified vulnerability in Bender products In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. | 7.5 |
| 2022-04-27 | CVE-2021-34590 | Unspecified vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. | 5.4 |
| 2022-04-27 | CVE-2021-34591 | Unspecified vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. | 7.8 |
| 2022-04-27 | CVE-2021-34592 | Unspecified vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. | 8.8 |
| 2022-04-27 | CVE-2021-34601 | Use of Hard-coded Credentials vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. | 9.8 |
| 2022-04-27 | CVE-2021-34602 | Unspecified vulnerability in Bender Cc612 Firmware and Icc15Xx Firmware In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. | 8.8 |
| 2020-10-16 | CVE-2019-19885 | Missing Authorization vulnerability in Bender products In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. | 9.1 |