Most recent entries from csaf_bendergmbhcokg

VDE-2025-084 — Bender Charge Controller Vulnerability - Unsecure Communication

2025-09-08T07:00:00+00:00

Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the weakness to be of high risk and it should be patched immediately.

VDE-2025-061 — Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated

2025-09-08T07:00:00+00:00

VDE-2021-047 — Bender/ebee: Multiple Charge Controller Vulnerabilities

2022-04-26T10:00:00+00:00

Bender is publishing this advisory to inform customers about multiple security vulnerabilities in the Charge Controller product families.Bender has analysed the weaknesses and determined that the electrical safety of the devices is not concerned. To Benders knowledge, proof-of-concept code or exploits for the weaknesses are not available to the public.Bender considers some weaknesses to be critical and thus need to be patched immediately. Therefore, patches are provided as maintenance branch versions 5.11.2, 5.12.5, 5.13.2 and 5.20.2. Future software releases will of course already include these patches.

VDE-2020-043 — Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability

2020-10-16T06:54:00+00:00

Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software.

The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization.