Bender kayıtları
bender üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-121 Stack-based Buffer Overflow1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-250 Execution with Unnecessary Privileges1
- CWE-259 Use of Hard-coded Password1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2021-34601İstismar yok | Bender Charge Controller: Hardcoded Credentials in Charge Controllerbender · cc612 firmware · CWE-259 | Kritik9,8 | — | %1,1 | 27 Nis 2022 |
36İzleyin | CVE-2019-19885İstismar yok | In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.bender · com465ip firmware · CWE-862 | Kritik9,1 | — | %1,0 | 16 Eki 2020 |
35İzleyin | CVE-2021-34602İstismar yok | Bender Charge Controller: Long URL could lead to webserver crashbender · cc612 firmware · CWE-78 | Yüksek8,8 | — | %1,4 | 27 Nis 2022 |
35İzleyin | CVE-2021-34592İstismar yok | Bender Charge Controller: Command injection via Web interfacebender · cc612 firmware · CWE-77 | Yüksek8,8 | — | %1,4 | 27 Nis 2022 |
34İzleyin | CVE-2021-34588İstismar yok | Bender Charge Controller: Unprotected data exportbender · cc612 firmware · CWE-425 | Yüksek8,6 | — | %0,9 | 27 Nis 2022 |
31İzleyin | CVE-2021-34591İstismar yok | Bender Charge Controller: Local privilege Escalationbender · cc612 firmware · CWE-250 | Yüksek7,8 | — | %0,2 | 27 Nis 2022 |
30İzleyin | CVE-2021-34589İstismar yok | Bender Charge Controller: RFID leakbender · cc612 firmware · CWE-200 | Yüksek7,5 | — | %1,0 | 27 Nis 2022 |
21İzleyin | CVE-2021-34587İstismar yok | Bender Charge Controller: Long URL could lead to webserver crashbender · cc612 firmware · CWE-121 | Orta5,3 | — | %0,9 | 27 Nis 2022 |
21İzleyin | CVE-2021-34590İstismar yok | Bender Charge Controller: Cross-site Scriptingbender · cc612 firmware · CWE-79 | Orta5,4 | — | %0,5 | 27 Nis 2022 |
- CVE-2021-3460139İzleyin
Bender Charge Controller: Hardcoded Credentials in Charge Controller
KritikCVSS 9,8İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2019-1988536İzleyin
In Bender COMTRAXX, user authorization is validated for most, but not all, routes in the system.
KritikCVSS 9,1İstismar yokEPSS %1bender · com465ip firmware16 Eki 2020
- CVE-2021-3460235İzleyin
Bender Charge Controller: Long URL could lead to webserver crash
YüksekCVSS 8,8İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2021-3459235İzleyin
Bender Charge Controller: Command injection via Web interface
YüksekCVSS 8,8İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2021-3458834İzleyin
Bender Charge Controller: Unprotected data export
YüksekCVSS 8,6İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2021-3459131İzleyin
Bender Charge Controller: Local privilege Escalation
YüksekCVSS 7,8İstismar yokEPSS %0bender · cc612 firmware27 Nis 2022
- CVE-2021-3458930İzleyin
Bender Charge Controller: RFID leak
YüksekCVSS 7,5İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2021-3458721İzleyin
Bender Charge Controller: Long URL could lead to webserver crash
OrtaCVSS 5,3İstismar yokEPSS %1bender · cc612 firmware27 Nis 2022
- CVE-2021-3459021İzleyin
Bender Charge Controller: Cross-site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0bender · cc612 firmware27 Nis 2022