← CVE Intelligence

CVE-2021-34592

Bender Charge Controller: Command injection via Web interface PUBLISHED

Description (CNA)

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.

Affected (CNA)

Vendor / productVersions
Bender / ebee / CC612affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2
Bender / ebee / CC613affected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2
Bender / ebee / ICC15xxaffected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2
Bender / ebee / ICC16xxaffected 5.11.x before 5.11.2; affected 5.12.x before 5.12.5; affected 5.13.x before 5.13.2; affected 5.20.x before 5.20.2

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.