Bender Charge Controller Credential Disclosure Vulnerability

A vulnerability exists in Bender Charge Controller models CC612, CC613, ICC13xx, and ICC16xx, all running versions 5.30.2 prior to 5.33.3. This vulnerability allows an authenticated, low-privileged attacker to access stored credentials on the charge controller, including the manufacturer password.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive credentials, including the manufacturer password, stored on the charge controller.

Remediation

Users are advised to upgrade to version 5.33.3 or later to address this vulnerability.