PT-2022-10365
CVE-2021-34601
·
تاريخ النشر
2022-04-27
·
تاريخ التحديث
2022-05-11
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Bender/ebee Charge Controllers versions 5.20.1 and below
Description
The issue concerns hardcoded credentials in the charge controllers, specifically hardcoded ssh credentials. This could allow an attacker to gain administrative access to the web-UI using the hardcoded password.
Recommendations
For versions 5.20.1 and below, consider changing the default ssh credentials to unique and strong passwords as a temporary workaround, and look for an update from the manufacturer that addresses the hardcoded credentials issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾