CVE-2025-41708highCWE-319

CVE-2025-41708: high-severity vulnerability in Bender CC612

Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

Published

Follow this CVE+ Monitor CC612+ Monitor CC613

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.2%
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Bender · CC612Bender · CC613Bender · ICC13xxBender · ICC15xxBender · ICC16xx
Related CVEs — Bender CC612

In the same product, most dangerous first.

CVE-2025-41682HIGHCredential Disclosure via Insecure Storage on Charge ControllerEPSS 0.3%