CVE-2021-34602

Bender Charge Controller: Long URL could lead to webserver crash

CVSS 8.8 HIGHEPSS 1.3%CWE-78

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields that are executed with root privileges.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Bender / ebee · CC612 Bender / ebee · CC613 Bender / ebee · ICC15xx Bender / ebee · ICC16xx

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://cert.vde.com/en/advisories/VDE-2021-047