Log in Start free

Vulnerability · Published Sep 8, 2025 · Assigned by CERTVDE

CVE-2025-41708Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

High 7.4

In plain English

A high-severity security flaw in CC612 from Bender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.2%top 85.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

Affected products (as reported)

VendorProductVersions
Bender CC612 0.0.0 – through all versions
Bender CC613 0.0.0 – through all versions
Bender ICC15xx 0.0.0 – through all versions
Bender ICC16xx 0.0.0 – through all versions
Bender ICC13xx 0.0.0 – through all versions

Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

References