CVE:CVE-2021-34589
CNNVD:CNNVD-202204-4502
ebee是Bender的一款充电控制器。
Bender ebee 充电控制器存在信息泄露漏洞，该漏洞源于出现 RFID 泄漏，无需验证即可通过 Web 界面读取最后一次充电事件的 RFID。攻击者利用此漏洞可绕过凭据检查并提升权限。以下产品和版本受到影响：5.11.2、5.12.5、5.13.2 或 5.20.2 之前版本的CC612、CC613系列、ICC15xx 或 ICC16xx。
solution:Upgrade bender cc612_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender cc613_firmware to a higher version than 5.11.2,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender icc613_firmware to a higher version than 5.12.5,and avoid the version [5.12.0,5.12.5); Upgrade bender icc15xx_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender icc16xx_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2)