Description (CNA)
In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bender / ebee / CC612 | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / CC613 | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / ICC15xx | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
| Bender / ebee / ICC16xx | affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2 |
CWE
CWE-200
References
ADP enrichment
No English description supplied.