CVE-2021-34601

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers versions 5.20.1 and below

Description The issue concerns hardcoded credentials in the charge controllers, specifically hardcoded ssh credentials. This could allow an attacker to gain administrative access to the web-UI using the hardcoded password.

Recommendations For versions 5.20.1 and below, consider changing the default ssh credentials to unique and strong passwords as a temporary workaround, and look for an update from the manufacturer that addresses the hardcoded credentials issue.