Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-41682

Credential Disclosure via Insecure Storage on Charge Controller

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bender CC612

Default version status: unaffected

  • 5.30.2 to < 5.33.3affected

Bender CC613

Default version status: unaffected

  • 5.30.2 to < 5.33.3affected

Bender ICC16xx

Default version status: unaffected

  • 5.30.2 to < 5.33.3affected

Bender ICC13xx

Default version status: unaffected

  • 5.30.2 to < 5.33.3affected

References