What’s Vulnerable › Vulnerabilities

CVE-2025-41708: Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-08 · updated 2026-10-18
• Weakness: CWE-319

Description

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

Affected products

• Bender / ebee CC612: all versions
• Bender / ebee CC613: all versions
• Bender ICC13xx: all versions
• Bender / ebee ICC15xx: all versions
• Bender / ebee ICC16xx: all versions

References

• https://certvde.com/de/advisories/VDE-2025-084

Get alerted when CVE-2025-41708 or the next vulnerability affects your stack