Most recent entries from csaf_bendergmbhcokg

VDE-2025-084 — Bender Charge Controller Vulnerability - Unsecure Communication

Mon, 08 Sep 2025 07:00:00 +0000

Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the weakness to be of high risk and it should be patched immediately.

VDE-2025-061 — Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated

Mon, 08 Sep 2025 07:00:00 +0000

VDE-2021-047 — Bender/ebee: Multiple Charge Controller Vulnerabilities

Tue, 26 Apr 2022 10:00:00 +0000

Bender is publishing this advisory to inform customers about multiple security vulnerabilities in the Charge Controller product families.Bender has analysed the weaknesses and determined that the electrical safety of the devices is not concerned. To Benders knowledge, proof-of-concept code or exploits for the weaknesses are not available to the public.Bender considers some weaknesses to be critical and thus need to be patched immediately. Therefore, patches are provided as maintenance branch versions 5.11.2, 5.12.5, 5.13.2 and 5.20.2. Future software releases will of course already include these patches.

VDE-2020-043 — Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability

Fri, 16 Oct 2020 06:54:00 +0000

Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software.

The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read and write configuration data without prior authorization.