Bender records
9 published records for vendor bender.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-121 Stack-based Buffer Overflow1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-250 Execution with Unnecessary Privileges1
- CWE-259 Use of Hard-coded Password1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
9 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2021-34601No exploit | Bender Charge Controller: Hardcoded Credentials in Charge Controllerbender · cc612 firmware · CWE-259 | Critical9.8 | — | 1.1% | Apr 27, 2022 |
36Monitor | CVE-2019-19885No exploit | In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.bender · com465ip firmware · CWE-862 | Critical9.1 | — | 1.0% | Oct 16, 2020 |
35Monitor | CVE-2021-34602No exploit | Bender Charge Controller: Long URL could lead to webserver crashbender · cc612 firmware · CWE-78 | High8.8 | — | 1.4% | Apr 27, 2022 |
35Monitor | CVE-2021-34592No exploit | Bender Charge Controller: Command injection via Web interfacebender · cc612 firmware · CWE-77 | High8.8 | — | 1.4% | Apr 27, 2022 |
34Monitor | CVE-2021-34588No exploit | Bender Charge Controller: Unprotected data exportbender · cc612 firmware · CWE-425 | High8.6 | — | 0.9% | Apr 27, 2022 |
31Monitor | CVE-2021-34591No exploit | Bender Charge Controller: Local privilege Escalationbender · cc612 firmware · CWE-250 | High7.8 | — | 0.2% | Apr 27, 2022 |
30Monitor | CVE-2021-34589No exploit | Bender Charge Controller: RFID leakbender · cc612 firmware · CWE-200 | High7.5 | — | 1.0% | Apr 27, 2022 |
21Monitor | CVE-2021-34587No exploit | Bender Charge Controller: Long URL could lead to webserver crashbender · cc612 firmware · CWE-121 | Medium5.3 | — | 0.9% | Apr 27, 2022 |
21Monitor | CVE-2021-34590No exploit | Bender Charge Controller: Cross-site Scriptingbender · cc612 firmware · CWE-79 | Medium5.4 | — | 0.5% | Apr 27, 2022 |
- CVE-2021-3460139Monitor
Bender Charge Controller: Hardcoded Credentials in Charge Controller
CriticalCVSS 9.8No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2019-1988536Monitor
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.
CriticalCVSS 9.1No exploitEPSS 1%bender · com465ip firmwareOct 16, 2020
- CVE-2021-3460235Monitor
Bender Charge Controller: Long URL could lead to webserver crash
HighCVSS 8.8No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3459235Monitor
Bender Charge Controller: Command injection via Web interface
HighCVSS 8.8No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3458834Monitor
Bender Charge Controller: Unprotected data export
HighCVSS 8.6No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3459131Monitor
Bender Charge Controller: Local privilege Escalation
HighCVSS 7.8No exploitEPSS 0%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3458930Monitor
Bender Charge Controller: RFID leak
HighCVSS 7.5No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3458721Monitor
Bender Charge Controller: Long URL could lead to webserver crash
MediumCVSS 5.3No exploitEPSS 1%bender · cc612 firmwareApr 27, 2022
- CVE-2021-3459021Monitor
Bender Charge Controller: Cross-site Scripting
MediumCVSS 5.4No exploitEPSS 0%bender · cc612 firmwareApr 27, 2022