CVE-2021-34589

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Apr 27, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-34596.8A privilege escalation vulnerability was reported in the MM1000 device configuration web server, which could allow privileged shell access aCVE-2021-345905.4In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting. An authenticated attacker could write HTML Code inCVE-2021-345917.8In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root accCVE-2021-345928.8In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could entCVE-2021-345937.5In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in seCVE-2021-345946.5TwinCAT OPC UA Server in TF6100 and TS6100 in product versions before 4.3.48.0 or with TcOpcUaServer versions below 3.2.0.194 are prone to aCVE-2021-345958.1A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNCVE-2021-345966.5A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versioCVE-2021-345977.8Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manCVE-2021-345987.5In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 the remote logging functionality is impaired by the lack of meCVE-2021-345997.4Affected versions of CODESYS Git in Versions prior to V1.1.0.0 lack certificate validation in HTTPS handshakes. CODESYS Git does not implemeCVE-2021-34609.8The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support
CVE-2021-34589: High severity, CVSS 7.5 | Vulnix