high8.8
CVE-2021-34592
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface.
Impact
In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bender | Cc612 Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |
| Bender | Icc15xx Firmware | from 5.11.0 before 5.11.2 from 5.12.0 before 5.12.5 from 5.13.0 before 5.13.2 from 5.20.0 before 5.20.2 |