Description
In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code into configuration values. These values are not properly escaped when displayed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bender / ebee | CC612 | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | CC613 | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | ICC15xx | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
| Bender / ebee | ICC16xx | 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 | 5.11.2 |
Advisories 1
- VDE-2021-047 Bender/ebee: Multiple Charge Controller Vulnerabilities CERT@VDE · Apr 26, 2022