CVE-2025-41708: Bender CC612

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

Affected products

• Bender CC612
• Bender CC613
• Bender ICC13XX
• Bender ICC15XX
• Bender ICC16XX

Published 2025-09-08. Last modified 2026-06-17.