Refine your search

3 vulnerabilities found for EC80ESP+ 2nd CAN by Bendix

CVE-2026-67560 (GCVE-0-2026-67560)
Vulnerability from cvelistv5
Published
2026-08-27 20:54
Modified
2026-08-28 14:13
Severity ?
7.5 (High) - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
7.7 (High) - CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CWE
Summary
Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.
References
Impacted products
Vendor Product Version
Bendix EC80ESP+ J1708 Version: Z228999
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-67560",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T13:50:27.752340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T14:13:53.473Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting."
            }
          ],
          "value": "Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:54:20.022Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Stack-based Buffer Overflow in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-67560",
    "datePublished": "2026-08-27T20:54:20.022Z",
    "dateReserved": "2026-08-10T16:03:40.493Z",
    "dateUpdated": "2026-08-28T14:13:53.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-68967 (GCVE-0-2026-68967)
Vulnerability from cvelistv5
Published
2026-08-27 20:50
Modified
2026-08-28 14:13
Severity ?
6.5 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
7.1 (High) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
CWE
Summary
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.
References
Impacted products
Vendor Product Version
Bendix EC80ESP+ J1708 Version: Z228999
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-68967",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T13:56:16.152994Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T14:13:53.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\u0026nbsp;is vulnerable to an out-of-bounds write, which could allow an attacker \nto deliver a payload that could establish an arbitrary write primitive, \nwhich could crash the ECU."
            }
          ],
          "value": "Bendix EC80 Brake ECU\u00a0is vulnerable to an out-of-bounds write, which could allow an attacker \nto deliver a payload that could establish an arbitrary write primitive, \nwhich could crash the ECU."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:50:22.011Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Write in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-68967",
    "datePublished": "2026-08-27T20:50:22.011Z",
    "dateReserved": "2026-08-10T16:03:40.497Z",
    "dateUpdated": "2026-08-28T14:13:53.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-71396 (GCVE-0-2026-71396)
Vulnerability from cvelistv5
Published
2026-08-27 20:45
Modified
2026-08-28 15:57
Severity ?
5.4 (Medium) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
5.3 (Medium) - CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
CWE
  • CWE-798 - Use of Hard-coded Credentials
Summary
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.
References
Impacted products
Vendor Product Version
Bendix EC80ESP+ J1708 Version: Z228999
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71396",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T15:49:02.909444Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T15:57:46.738Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\u0026nbsp;uses hard-coded credentials, which could allow an attacker to disable automatic traction control."
            }
          ],
          "value": "Bendix EC80 Brake ECU\u00a0uses hard-coded credentials, which could allow an attacker to disable automatic traction control."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:45:52.804Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Use of Hard-coded Credentials in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-71396",
    "datePublished": "2026-08-27T20:45:52.804Z",
    "dateReserved": "2026-08-10T16:03:40.501Z",
    "dateUpdated": "2026-08-28T15:57:46.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}