Skip to content
OpenAdvisories
Medium · 5.3 CVE-2021-34587 EUVD-2021-21237GHSA-47xc-94f4-86xr

Bender Charge Controller: Long URL could lead to webserver crash

Published Apr 27, 2022 · Updated Sep 17, 2024 · Assigned by CERTVDE

Vendor: Bender / ebee Product: CC612 Product: CC613 Product: ICC15xx Product: ICC16xx

Description

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

Affected products

VendorProductAffectedFixed
Bender / ebee CC612 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 5.11.2
Bender / ebee CC613 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 5.11.2
Bender / ebee ICC15xx 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 5.11.2
Bender / ebee ICC16xx 5.11.x – < 5.11.2, 5.12.x – < 5.12.5, 5.13.x – < 5.13.2, 5.20.x – < 5.20.2 5.11.2

Advisories 1

References