Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-71396

Use of Hard-coded Credentials in Bendix EC80 Brake ECU

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bendix EC80ESP+ J1708

Default version status: unaffected

  • Z228999affected
  • Z300822unaffected

Bendix EC80ESP+ 6S/6M

Default version status: unaffected

  • Z228999affected
  • Z300822unaffected

Bendix EC80ESP+ PLC

Default version status: unaffected

  • Z228999affected
  • Z300822unaffected

Bendix EC80ESP+ 2nd CAN

Default version status: unaffected

  • Z228999affected
  • Z300822unaffected

Bendix EC80ESP+ Integrated TPMS

Default version status: unaffected

  • Z228999affected
  • Z300822unaffected

Bendix EC80ESP 6S/6M

Default version status: unaffected

  • Z266494affected
  • Z302578unaffected

Bendix EC80ESP PLC

Default version status: unaffected

  • Z266494affected
  • Z302578unaffected

Bendix EC80ESP 2nd CAN

Default version status: unaffected

  • Z266494affected
  • Z302578unaffected

Bendix EC80ESP CAN Gateway

Default version status: unaffected

  • Z266494affected
  • Z302578unaffected

Bendix EC80ESP 4S/4M

Default version status: unaffected

  • Z286098affected
  • Z302579unaffected

Bendix EC80ESP PLC

Default version status: unaffected

  • Z286098affected
  • Z302579unaffected

References