Bender ebee Charging Controller Buffer Error Vulnerability

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from a long URL that could cause the web server to crash. An attacker can exploit this vulnerability to bypass credential checks and elevate privileges. The following...

Bender ebee Charging Controller has a security vulnerability

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from an easy local privilege escalation. An authenticated attacker can gain root access via the suid application socat, ip udhcpc, and ifplugd. The following products and...

PT-2022-10363 · Unknown · Bender/Ebee Charge Controllers

Name of the Vulnerable Software and Affected Versions: Bender/ebee Charge Controllers affected versions not specified Description: The issue allows for Command injection via the Web interface. An authenticated attacker could enter shell commands into some input fields. Recommendations: At the...

Bender ebee Charging Controller Cross-site Script Vulnerability

ebee is a charge controller from Bender. A cross-site scripting vulnerability exists in the Bender ebee Charge Controller that stems from easy cross-site scripting. An authenticated attacker could write HTML code to configuration values. These values are not properly escaped when displayed. The...

Bender ebee charging controller command injection vulnerability

The ebee is a charge controller from Bender. The Bender ebee Charge Controller suffers from a command injection vulnerability that stems from easy command injection via the web interface. An authenticated attacker could enter shell commands in certain input fields. The following products and...

CVE-2021-34587: Stack-based Buffer Overflow

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable...

PT-2022-10366

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers affected versions not specified Description The issue allows for command injection via the web interface. An authenticated attacker can enter shell commands into certain input fields, which are then executed with...

PT-2022-10362

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers affected versions not specified Description The issue concerns Local privilege Escalation in Bender/ebee Charge Controllers. An authenticated attacker could potentially gain root access through the suid...

CVE-2021-34592: Improper Neutralization of Special Elements used in a Command

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields...

PT-2022-10360 · Unknown · Bender/Ebee Charge Controllers

Name of the Vulnerable Software and Affected Versions: Bender/ebee Charge Controllers affected versions not specified Description: The issue concerns an RFID leak in Bender/ebee Charge Controllers. The RFID of the last charge event can be read without authentication via the web interface...

Bender ebee Charging Controller: Operating System Command Injection Vulnerability

The ebee is a charge controller from Bender. The Bender ebee Charge Controller suffers from an operating system command injection vulnerability that stems from easy command injection via the web interface. An authenticated attacker could enter shell commands into certain input fields executed wit...

CVE-2021-34589: Exposure of Sensitive Information to an Unauthorized Actor

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface...

Bender ebee Charging Controller: Information leakage vulnerability

The ebee is a charge controller from Bender. An information disclosure vulnerability exists in the Bender ebee Charge Controller, which stems from an RFID leak that allows the RFID of the last charging event to be read via the web interface without authentication.An attacker can exploit this...

PT-2022-10361 · Unknown · Bender/Ebee Charge Controllers

Name of the Vulnerable Software and Affected Versions: Bender/ebee Charge Controllers affected versions not specified Description: The issue allows an authenticated attacker to perform Cross-site Scripting by writing HTML code into configuration values, which are not properly escaped when...

PT-2022-10359

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers affected versions not specified Description The issue concerns unprotected data export in Bender/ebee Charge Controllers. The backup export is protected via a random key that is set at user login, but this key is...

Bender ebee Charging Controller Trust Management Vulnerability

The ebee is a charge controller from Bender. A security vulnerability exists in the Bender ebee Charge Controller that stems from the susceptibility to hard-coded credentials. An attacker may be able to use a password to gain administrative access to the Web UI. The following products and version...

CVE-2021-34588: Direct Request

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2019-19885

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0...

CVE-2019-19885

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0...

Authorization

In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization. This affects COM465IP, COM465DP, COM465ID, CP700, CP907, and CP915 devices before 4.2.0...