What is CVE-2021-34601?

CVE-2021-34601 is a critical-severity vulnerability in Bender Cc612, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2022-04-27.

How severe is CVE-2021-34601?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Bender Cc612

CVE-2021-34601

In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials. Bender charge controller CC612 in version 5.20.1 and below is prone to hardcoded ssh credentials. An attacker may use the password to gain administr…

EPSS: 0.010 (58.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Bender Cc612
Bender Cc612_firmware
Bender Cc613
Bender Icc15xx_firmware
Bender / Ebee Cc612 — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Cc613 — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Icc15xx — versions 5.11.x, 5.12.x, 5.13.x
Bender / Ebee Icc16xx — versions 5.11.x, 5.12.x, 5.13.x

Weakness classification (CWE)

References

info@cert.vde.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34601?: CVE-2021-34601 is a critical-severity vulnerability in Bender Cc612, classified under Use of Hard-coded Password. CVSS score: 9.8/10. Published 2022-04-27.
How severe is CVE-2021-34601?: Critical severity. CVSS v3 base score is 9.8 out of 10.