CVE-2021-34602

8.8 highEPSS 1.4%

High (8.8) in bender. EPSS 1.4% chance of exploitation in the next 30 days.

In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface. An authenticated attacker could enter shell commands into some input fields that are executed with root privileges.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-04-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bender:cc612_firmware
bender:icc15xx_firmware

References

https://cert.vde.com/en/advisories/VDE-2021-047
https://cert.vde.com/en/advisories/VDE-2021-047

Check your stack JSON