What is CVE-2021-34601?

CVE-2021-34601 is a critical-severity vulnerability in Bender Cc612, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2022-04-27.

How severe is CVE-2021-34601?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Bender Cc612

CVE-2021-34601

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administrative access to the web-UI.

Published 2022-04-27 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.011 (63.9th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 64th percentile — 63.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: +0.000

Affected products

Bender Cc612
Bender Cc612 Firmware
Bender Cc613
Bender Icc15xx Firmware
Bender / Ebee Cc612 — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Cc613 — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Icc15xx — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Icc16xx — versions 5.11.x, 5.12.x, 5.13.x

Weakness classification (CWE)

References

cert.vde.com/en/advisories/VDE-2021-047 (Vendor Advisory)

Frequently asked questions

What is CVE-2021-34601?: CVE-2021-34601 is a critical-severity vulnerability in Bender Cc612, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2022-04-27.
How severe is CVE-2021-34601?: Critical severity. CVSS v3 base score is 9.8 out of 10.