Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering a...
Vendor
Bendix vulnerabilities
3 published CVES affecting Bendix, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- EC80ESP 2nd CAN 3
- EC80ESP 4S/4M 3
- EC80ESP 6S/6M 3
- EC80ESP CAN Gateway 3
- EC80ESP PLC 3
- EC80ESP+ 2nd CAN 3
- EC80ESP+ 6S/6M 3
- EC80ESP+ Integrated TPMS 3
- EC80ESP+ J1708 3
- EC80ESP+ PLC 3
Latest Bendix CVEs
Newest publication first
-
HighCVSS 7.7
-
HighCVSS 7.1
Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.
-
MediumCVSS 5.3
Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.