CVE-2021-34589CWE-200

Bender Charge Controller: RFID leak

High · published April 27, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00990 · 62.2th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-04-27T15:15Z
EPSS history
Timeline
  • 27 APR 15:15Z
    Bender Charge Controller: RFID leak
    cvelistv5