Severity

8.6

Vulnerability Type

Direct Request (Forced Browsing) (CWE-425)

Summary

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

Impact

no impact information found