CVE-2021-34587

Summary

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

Affected Software

VendorProductVersion RangeStatus
Bender / ebeeCC6125.11.x < 5.11.2affected
Bender / ebeeCC6125.12.x < 5.12.5affected
Bender / ebeeCC6125.13.x < 5.13.2affected
Bender / ebeeCC6125.20.x < 5.20.2affected
Bender / ebeeCC6135.11.x < 5.11.2affected
Bender / ebeeCC6135.12.x < 5.12.5affected
Bender / ebeeCC6135.13.x < 5.13.2affected
Bender / ebeeCC6135.20.x < 5.20.2affected
Bender / ebeeICC15xx5.11.x < 5.11.2affected
Bender / ebeeICC15xx5.12.x < 5.12.5affected
Bender / ebeeICC15xx5.13.x < 5.13.2affected
Bender / ebeeICC15xx5.20.x < 5.20.2affected
Bender / ebeeICC16xx5.11.x < 5.11.2affected
Bender / ebeeICC16xx5.12.x < 5.12.5affected
Bender / ebeeICC16xx5.13.x < 5.13.2affected
Bender / ebeeICC16xx5.20.x < 5.20.2affected

Weaknesses

  • CWE-121: CWE-121 Stack-based Buffer Overflow

ADP Enrichment

CVE Program Container

Additional References

References