Advisories · Technology
EVbee DC 80.
Every CVE that names EVbee DC 80 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Weak root password in EVbee DC 80
- EVbee DC 80
- Hard-coded credentials
- CVSS 5.1 Medium
Sensitive information leak through hidden menu
- EVbee DC-80
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Command injection in NPC start web endpoint
- EVbee DC-80
- Command injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Sensitive information is written to logs
- EVbee DC-80
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Missing firmware validation allows remote code execution
- EVbee DC-80
- Weak cryptography or TLS
- CVSS 8.7 High
Missing authentication for Bluetooth communication
- EVbee DC-80
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Arbitrary file overwrite through certificate update functionality
- EVbee DC-80
- CWE-20
- CVSS 9.3 CriticalCritical · CVSS 9+
Missing authentication for webserver endpoints
- EVbee DC-80
- Authentication bypass
- CVSS 8.6 High
Comnand injection in OCPP ReserveLogin message
- EVbee DC-80
- Command injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Command injection in diagnosis web endpoint
- EVbee DC-80
- Command injection