PatchTheCVEbender vulnerabilities
Recent CVEs affecting bender products. 8 tracked.
bender has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2022-04-27. Highest priority: CVE-2021-34601 (score 56/100).
- CVE-2021-34602 HIGH 8.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface
- CVE-2021-34601 CRITICAL 9.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials
- CVE-2021-34592 HIGH 8.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Command injection via Web interface
- CVE-2021-34591 HIGH 7.8 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Local privilege Escalation
- CVE-2021-34590 MEDIUM 5.4 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to Cross-site Scripting
- CVE-2021-34589 HIGH 7.5 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak
- CVE-2021-34588 HIGH 8.6 UPGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export
- CVE-2021-34587 MEDIUM 5.3 DOWNGRADE UPGRADE In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash
FAQ
How do I fix bender vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bender being exploited right now?
None of the tracked bender CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bender CVE should I patch first?
CVE-2021-34601 currently ranks highest (56/100): In Bender/ebee Charge Controllers in multiple versions are prone to Hardcoded Credentials.