high7.8
CVE-2021-34591
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation.
Impact
In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bender | Cc612 Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc15xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |