CVE-2021-34589: In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the…

PriorityP344high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.92%

55.9th percentile

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

Affected

32 ranges· showing 25

Vendor	Product	Version range	Fixed in
bender	cc612_firmware	>= 5.11.0 < 5.11.2	5.11.2
bender	cc612_firmware	>= 5.12.0 < 5.12.5	5.12.5
bender	cc612_firmware	>= 5.13.0 < 5.13.2	5.13.2
bender	cc612_firmware	>= 5.20.0 < 5.20.2	5.20.2
bender	cc613_firmware	>= 5.11.0 < 5.11.2	5.11.2
bender	cc613_firmware	>= 5.13.0 < 5.13.2	5.13.2
bender	cc613_firmware	>= 5.20.0 < 5.20.2	5.20.2
bender	ebee_cc612	>= 5.11.x < 5.11.2	5.11.2
bender	ebee_cc612	>= 5.12.x < 5.12.5	5.12.5
bender	ebee_cc612	>= 5.13.x < 5.13.2	5.13.2
bender	ebee_cc612	>= 5.20.x < 5.20.2	5.20.2
bender	ebee_cc613	>= 5.11.x < 5.11.2	5.11.2
bender	ebee_cc613	>= 5.12.x < 5.12.5	5.12.5
bender	ebee_cc613	>= 5.13.x < 5.13.2	5.13.2
bender	ebee_cc613	>= 5.20.x < 5.20.2	5.20.2
bender	ebee_icc15xx	>= 5.11.x < 5.11.2	5.11.2
bender	ebee_icc15xx	>= 5.12.x < 5.12.5	5.12.5
bender	ebee_icc15xx	>= 5.13.x < 5.13.2	5.13.2
bender	ebee_icc15xx	>= 5.20.x < 5.20.2	5.20.2
bender	ebee_icc16xx	>= 5.11.x < 5.11.2	5.11.2
bender	ebee_icc16xx	>= 5.12.x < 5.12.5	5.12.5
bender	ebee_icc16xx	>= 5.13.x < 5.13.2	5.13.2
bender	ebee_icc16xx	>= 5.20.x < 5.20.2	5.20.2
bender	icc15xx_firmware	>= 5.11.0 < 5.11.2	5.11.2
bender	icc15xx_firmware	>= 5.12.0 < 5.12.5	5.12.5

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.