CVE-2021-34588

High

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key.…

CERTVDE·CWE-425·Published 2022-04-27

CVSS

8.6

EPSS

0.01

KEV

Exploits

cve.orgen

194 chars

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

NVDen

194 chars

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

En los Controladores de Carga Bender/ebee en múltiples versiones son propensos a una exportación de datos sin protección. La exportación de copias de seguridad está protegida por medio de una clave aleatoria. La clave es establecida en el inicio de sesión del usuario. Está vacía después de reiniciar

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	cve.org	8.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	NVD	8.6	3.9	4.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
3.1	Primary	cve.org	8.6	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
3.1	Secondary	NVD	8.6	3.9	4.0	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N