CVE-2021-34591

7.8 highEPSS 0.2%

High (7.8) in bender. EPSS 0.2% chance of exploitation in the next 30 days.

In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation. An authenticated attacker could get root access via the suid applications socat, ip udhcpc and ifplugd.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-250
Published: 2022-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bender:cc612_firmware
bender:icc15xx_firmware

References

https://cert.vde.com/en/advisories/VDE-2021-047
https://cert.vde.com/en/advisories/VDE-2021-047

Check your stack JSON