CVE-2021-34592

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

1.37%

Published

Apr 27, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-77

Affected Products (20)

bender · cc612_firmware (up to 5.11.2)vulnerable

bender · cc612_firmware (up to 5.12.5)vulnerable

bender · cc612_firmware (up to 5.13.2)vulnerable

bender · cc612_firmware (up to 5.20.2)vulnerable

bender · cc612

bender · icc15xx_firmware (up to 5.11.2)vulnerable

bender · icc15xx_firmware (up to 5.12.5)vulnerable

bender · icc15xx_firmware (up to 5.13.2)vulnerable

bender · icc15xx_firmware (up to 5.20.2)vulnerable

bender · cc613

bender · icc15xx_firmware (up to 5.11.2)vulnerable

bender · icc15xx_firmware (up to 5.12.5)vulnerable

bender · icc15xx_firmware (up to 5.13.2)vulnerable

bender · icc15xx_firmware (up to 5.20.2)vulnerable

bender · cc613

bender · icc15xx_firmware (up to 5.11.2)vulnerable

bender · icc15xx_firmware (up to 5.12.5)vulnerable

bender · icc15xx_firmware (up to 5.13.2)vulnerable

bender · icc15xx_firmware (up to 5.20.2)vulnerable

bender · cc613

References (2)

https://cert.vde.com/en/advisories/VDE-2021-047

Not ApplicableVendor Advisory

https://cert.vde.com/en/advisories/VDE-2021-047

Not ApplicableVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs