PatchTheCVEicc15xx firmware vulnerabilities and fixes
Recent CVEs affecting icc15xx firmware, with upgrade or downgrade steps. 8 tracked.
Also searched as: icc15xxfirmware.
icc15xx firmware has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2022-04-27. Highest priority: CVE-2021-34601 (score 56/100).
- CVE-2021-34602 HIGH 8.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface
- CVE-2021-34601 CRITICAL 9.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials
- CVE-2021-34592 HIGH 8.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface
- CVE-2021-34591 HIGH 7.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation
- CVE-2021-34590 MEDIUM 5.4 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting
- CVE-2021-34589 HIGH 7.5 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak
- CVE-2021-34588 HIGH 8.6 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export
- CVE-2021-34587 MEDIUM 5.3 DOWNGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash
FAQ
How do I fix icc15xx firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is icc15xx firmware being exploited right now?
None of the tracked icc15xx firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which icc15xx firmware CVE should I patch first?
CVE-2021-34601 currently ranks highest (56/100): In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials.