github - ghsa-c36w-9wvv-9rh6

ghsa-c36w-9wvv-9rh6

Vulnerability from github

Published

2022-04-28 00:00

Modified

2022-05-12 00:01

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

Show details on source website

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2021-34589"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-200"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-04-27T16:15:00Z",
    "severity": "HIGH"
  },
  "details": "In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.",
  "id": "GHSA-c36w-9wvv-9rh6",
  "modified": "2022-05-12T00:01:43Z",
  "published": "2022-04-28T00:00:33Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34589"
    },
    {
      "type": "WEB",
      "url": "https://cert.vde.com/en/advisories/VDE-2021-047"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    }
  ]
}

cve-2021-34589

Vulnerability from cvelistv5

Published

2022-04-27 15:15

Modified

2024-09-16 21:08

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

Bender Charge Controller: RFID leak

References

▼	URL	Tags
	https://cert.vde.com/en/advisories/VDE-2021-047	x_refsource_CONFIRM

Impacted products

▼	Vendor	Product
	Bender / ebee	CC612
	Bender / ebee	CC613
	Bender / ebee	ICC15xx
	Bender / ebee	ICC16xx

Show details on NVD website

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:19:46.936Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert.vde.com/en/advisories/VDE-2021-047"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "CC612",
          "vendor": "Bender / ebee",
          "versions": [
            {
              "lessThan": "5.11.2",
              "status": "affected",
              "version": "5.11.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.12.5",
              "status": "affected",
              "version": "5.12.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.13.2",
              "status": "affected",
              "version": "5.13.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.20.2",
              "status": "affected",
              "version": "5.20.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "CC613",
          "vendor": "Bender / ebee",
          "versions": [
            {
              "lessThan": "5.11.2",
              "status": "affected",
              "version": "5.11.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.12.5",
              "status": "affected",
              "version": "5.12.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.13.2",
              "status": "affected",
              "version": "5.13.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.20.2",
              "status": "affected",
              "version": "5.20.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "ICC15xx",
          "vendor": "Bender / ebee",
          "versions": [
            {
              "lessThan": "5.11.2",
              "status": "affected",
              "version": "5.11.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.12.5",
              "status": "affected",
              "version": "5.12.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.13.2",
              "status": "affected",
              "version": "5.13.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.20.2",
              "status": "affected",
              "version": "5.20.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "ICC16xx",
          "vendor": "Bender / ebee",
          "versions": [
            {
              "lessThan": "5.11.2",
              "status": "affected",
              "version": "5.11.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.12.5",
              "status": "affected",
              "version": "5.12.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.13.2",
              "status": "affected",
              "version": "5.13.x",
              "versionType": "custom"
            },
            {
              "lessThan": "5.20.2",
              "status": "affected",
              "version": "5.20.x",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Bender thanks the IT security researchers at OpenSource Security GmbH for their thorough and in-depth work. The issue was coordinated by CERT@VDE."
        }
      ],
      "datePublic": "2022-04-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200 Information Exposure",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-04-27T15:15:27",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert.vde.com/en/advisories/VDE-2021-047"
        }
      ],
      "source": {
        "advisory": "VDE-2021-047",
        "defect": [
          "CERT@VDE#64088"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "Bender Charge Controller: RFID leak",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "info@cert.vde.com",
          "DATE_PUBLIC": "2022-04-27T10:00:00.000Z",
          "ID": "CVE-2021-34589",
          "STATE": "PUBLIC",
          "TITLE": "Bender Charge Controller: RFID leak"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "CC612",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.11.x",
                            "version_value": "5.11.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.12.x",
                            "version_value": "5.12.5"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.13.x",
                            "version_value": "5.13.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.20.x",
                            "version_value": "5.20.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "CC613",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.11.x",
                            "version_value": "5.11.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.12.x",
                            "version_value": "5.12.5"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.13.x",
                            "version_value": "5.13.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.20.x",
                            "version_value": "5.20.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "ICC15xx",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.11.x",
                            "version_value": "5.11.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.12.x",
                            "version_value": "5.12.5"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.13.x",
                            "version_value": "5.13.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.20.x",
                            "version_value": "5.20.2"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "ICC16xx",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.11.x",
                            "version_value": "5.11.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.12.x",
                            "version_value": "5.12.5"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.13.x",
                            "version_value": "5.13.2"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "5.20.x",
                            "version_value": "5.20.2"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Bender / ebee"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Bender thanks the IT security researchers at OpenSource Security GmbH for their thorough and in-depth work. The issue was coordinated by CERT@VDE."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200 Information Exposure"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert.vde.com/en/advisories/VDE-2021-047",
              "refsource": "CONFIRM",
              "url": "https://cert.vde.com/en/advisories/VDE-2021-047"
            }
          ]
        },
        "source": {
          "advisory": "VDE-2021-047",
          "defect": [
            "CERT@VDE#64088"
          ],
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2021-34589",
    "datePublished": "2022-04-27T15:15:27.151287Z",
    "dateReserved": "2021-06-10T00:00:00",
    "dateUpdated": "2024-09-16T21:08:59.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Log in or create an account to share your comment.

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.