Bender Charge Controller: Hardcoded Credentials in Charge Controller
Vulnerability Description
In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-34601
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Bender thanks Qianxin StarV Security Lab, China. The issue was coordinated by CERT@VDE.
More from Bender / ebee
View All →Affected Vendor
Bender / ebee
View all reports →