Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated
Advisory ansehen veröffentlicht 2025-09-08
Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the weakness to be of high risk and it should be patched immediately.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41682US | — | — | ||
An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- VDE-2025-061: Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated - CSAFself
- VDE-2025-061: Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated - HTMLself
- CERT@VDE Security Advisories for Bender GmbH & Co. KGexternal
- Vendor PSIRTexternal
03
Behebungen (1)
- Behoben
Install software update 5.33.3 or later.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan