📦 Cc612 Firmware

by Bender

🔍 What is Cc612 Firmware?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-34601

CRITICAL CVSS 9.8 Apr 27, 2022

Bender/ebee Charge Controllers have hardcoded SSH credentials that allow administrative access to the web-UI. This affects CC612 controllers version 5.20.1 and below, enabling attackers to gain full c...

CVE-2021-34591

HIGH CVSS 7.8 Apr 27, 2022

This vulnerability allows authenticated attackers to escalate privileges to root on Bender/ebee Charge Controllers by exploiting SUID permissions on socat, ip, udhcpc, and ifplugd applications. It aff...

CVE-2021-34588

HIGH CVSS 8.6 Apr 27, 2022

This vulnerability in Bender/ebee Charge Controllers allows attackers to access unprotected data exports after device reboot. The backup export feature uses a random key that resets to empty after reb...