CVE:CVE-2021-34587
CNNVD:CNNVD-202204-4503
ebee是Bender的一款充电控制器。
Bender ebee 充电控制器存在安全漏洞，该漏洞源于长 URL 可能导致网络服务器崩溃。攻击者利用此漏洞可绕过凭据检查并提升权限。以下产品和版本受到影响：5.11.2、5.12.5、5.13.2 或 5.20.2 之前版本的CC612、CC613系列、ICC15xx 或 ICC16xx。
solution:Upgrade ibm _ibm_rational_lifecycle_integration_adapter_for_windchill to a higher version than 1.0.0,and avoid the version 1.0.0; Upgrade bender cc612_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender cc613_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender icc15xx_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2); Upgrade bender icc16xx_firmware to a higher version than 5.11.2,5.12.5,5.13.2,5.20.2,and avoid the version [5.11.0,5.11.2),[5.12.0,5.12.5),[5.13.0,5.13.2),[5.20.0,5.20.2)