CVE-2021-34587

MEDIUM

Ibm Rational Lifecycle Integration Ad... - Out-of-Bounds Write

Title source: rule

Description

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

References (1)

Core 1

Core References

Third Party Advisory x_refsource_confirm

https://cert.vde.com/en/advisories/VDE-2021-047

Scores

CVSS v3 5.3

EPSS 0.0031

EPSS Percentile 53.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Details

CWE

CWE-121 CWE-787

Status published

Products (5)

bender/cc612_firmware 5.11.0 - 5.11.2

bender/cc613_firmware 5.11.0 - 5.11.2

bender/icc15xx_firmware 5.11.0 - 5.11.2

bender/icc16xx_firmware 5.11.0 - 5.11.2

ibm/_ibm_rational_lifecycle_integration_adapter_for_windchill 1.0.0

Published Apr 27, 2022

Tracked Since Feb 18, 2026