CVE-2025-41708
7.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Summary
Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Bender | CC612 | 0.0.0 <= all versions | affected |
| Bender | CC613 | 0.0.0 <= all versions | affected |
| Bender | ICC15xx | 0.0.0 <= all versions | affected |
| Bender | ICC16xx | 0.0.0 <= all versions | affected |
| Bender | ICC13xx | 0.0.0 <= all versions | affected |
Weaknesses
- CWE-319: CWE-319 Cleartext Transmission of Sensitive Information
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.