CVE-2021-34592CWE-77

Bender Charge Controller: Command injection via Web interface

High · published April 27, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01391 · 72.1th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2022-04-27T15:15Z
EPSS history
Timeline
  • 27 APR 15:15Z
    Bender Charge Controller: Command injection via Web interface
    cvelistv5