# CVE-2021-34588

## Summary

- **CVE ID:** CVE-2021-34588
- **Severity:** HIGH
- **CVSS Score:** 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)
- **CWE:** CWE-425
- **Published:** Apr 27, 2022
- **Last Modified:** Mar 13, 2026

## Description

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

## Affected Products

- Bender / ebee — CC612 (5.11.x)
- Bender / ebee — CC612 (5.12.x)
- Bender / ebee — CC612 (5.13.x)
- Bender / ebee — CC612 (5.20.x)
- Bender / ebee — CC613 (5.11.x)
- Bender / ebee — CC613 (5.12.x)
- Bender / ebee — CC613 (5.13.x)
- Bender / ebee — CC613 (5.20.x)
- Bender / ebee — ICC15xx (5.11.x)
- Bender / ebee — ICC15xx (5.12.x)
- Bender / ebee — ICC15xx (5.13.x)
- Bender / ebee — ICC15xx (5.20.x)
- Bender / ebee — ICC16xx (5.11.x)
- Bender / ebee — ICC16xx (5.12.x)
- Bender / ebee — ICC16xx (5.13.x)
- Bender / ebee — ICC16xx (5.20.x)

## References

- [CNA](https://cert.vde.com/en/advisories/VDE-2021-047)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.28%
- **EPSS Percentile:** 51.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._