Description
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker
to deliver a payload that could establish an arbitrary write primitive,
which could crash the ECU.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bendix | EC80ESP+ J1708 | Z228999 | Z300822 |
| Bendix | EC80ESP+ 6S/6M | Z228999 | Z300822 |
| Bendix | EC80ESP+ PLC | Z228999 | Z300822 |
| Bendix | EC80ESP+ 2nd CAN | Z228999 | Z300822 |
| Bendix | EC80ESP+ Integrated TPMS | Z228999 | Z300822 |
| Bendix | EC80ESP 6S/6M | Z266494 | Z302578 |
| Bendix | EC80ESP PLC | Z266494, Z286098 | Z302578 |
| Bendix | EC80ESP 2nd CAN | Z266494 | Z302578 |
| Bendix | EC80ESP CAN Gateway | Z266494 | Z302578 |
| Bendix | EC80ESP 4S/4M | Z286098 | Z302579 |
Advisories 1
- ICSA-26-237-05 Bendix EC80 Brake ECU CISA ICS & IT advisories · Aug 25, 2026