Description
In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bender / ebee | CC612 | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | CC613 | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | ICC15xx | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | ICC16xx | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
Advisories 1
- VDE-2021-047 Bender/ebee: Multiple Charge Controller Vulnerabilities CERT@VDE · Apr 26, 2022