Skip to content
OpenAdvisories
High · 8.8 CVE-2025-41682 EUVD-2025-27116GHSA-mxg6-f57q-5xh5

Credential Disclosure via Insecure Storage on Charge Controller

Published Sep 8, 2025 · Updated Sep 8, 2025 · Assigned by CERTVDE

Description

An authenticated, low-privileged attacker can obtain credentials stored on the charge controller including the manufacturer password.

Affected products

VendorProductAffectedFixed
Bender CC612 5.30.2 – < 5.33.3 5.33.3
Bender CC613 5.30.2 – < 5.33.3 5.33.3
Bender ICC16xx 5.30.2 – < 5.33.3 5.33.3
Bender ICC13xx 5.30.2 – < 5.33.3 5.33.3

Advisories 1

References