Vulnerability-Lookup

ICSA-26-237-05

Vulnerability from csaf_cisa - Published: 2026-08-25 06:00 - Updated: 2026-08-25 06:00

Summary

Bendix EC80 Brake ECU

Notes

Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Advisory Summary: Successful exploitation of these vulnerabilities could allow an attacker to cause the loss of ABS functions, steering assist, speedometer, shifting capabilities, or disable automatic traction control.

Critical infrastructure sectors: Transportation Systems

Countries/areas deployed: United States, Canada

Company headquarters location: United States

Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.

Recommended Practices: Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.

Recommended Practices: Locate control system networks and remote devices behind firewalls and isolating them from business networks.

Recommended Practices: When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices: CISA also recommends users take the following measures to protect themselves from social engineering attacks:

Recommended Practices: Do not click web links or open attachments in unsolicited email messages.

Recommended Practices: Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.

Recommended Practices: Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.

Recommended Practices: No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.

CVE-2026-67560

7.5 (High)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-121 - Stack-based Buffer Overflow

Affected products

Known affected 11 products

Product	Version	Remediation
Bendix EC80ESP+ J1708: Z228999 Bendix / EC80ESP+ J1708	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 6S/6M: Z228999 Bendix / EC80ESP+ 6S/6M	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ PLC: Z228999 Bendix / EC80ESP+ PLC	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 2nd CAN: Z228999 Bendix / EC80ESP+ 2nd CAN	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ Integrated TPMS: Z228999 Bendix / EC80ESP+ Integrated TPMS	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP 6S/6M: Z266494 Bendix / EC80ESP 6S/6M	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z266494 Bendix / EC80ESP PLC	Z266494	Mitigation fix Vendor Fix Vendor Fix
Bendix EC80ESP 2nd CAN: Z266494 Bendix / EC80ESP 2nd CAN	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP CAN Gateway: Z266494 Bendix / EC80ESP CAN Gateway	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP 4S/4M: Z286098 Bendix / EC80ESP 4S/4M	Z286098	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z286098 Bendix / EC80ESP PLC	Z286098	Mitigation fix Vendor Fix Vendor Fix

CVE-2026-68967

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-787 - Out-of-bounds Write

Affected products

Known affected 11 products

Product	Version	Remediation
Bendix EC80ESP+ J1708: Z228999 Bendix / EC80ESP+ J1708	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 6S/6M: Z228999 Bendix / EC80ESP+ 6S/6M	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ PLC: Z228999 Bendix / EC80ESP+ PLC	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 2nd CAN: Z228999 Bendix / EC80ESP+ 2nd CAN	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ Integrated TPMS: Z228999 Bendix / EC80ESP+ Integrated TPMS	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP 6S/6M: Z266494 Bendix / EC80ESP 6S/6M	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z266494 Bendix / EC80ESP PLC	Z266494	Mitigation fix Vendor Fix Vendor Fix
Bendix EC80ESP 2nd CAN: Z266494 Bendix / EC80ESP 2nd CAN	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP CAN Gateway: Z266494 Bendix / EC80ESP CAN Gateway	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP 4S/4M: Z286098 Bendix / EC80ESP 4S/4M	Z286098	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z286098 Bendix / EC80ESP PLC	Z286098	Mitigation fix Vendor Fix Vendor Fix

CVE-2026-71396

5.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CWE-798 - Use of Hard-coded Credentials

Affected products

Known affected 11 products

Product	Version	Remediation
Bendix EC80ESP+ J1708: Z228999 Bendix / EC80ESP+ J1708	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 6S/6M: Z228999 Bendix / EC80ESP+ 6S/6M	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ PLC: Z228999 Bendix / EC80ESP+ PLC	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ 2nd CAN: Z228999 Bendix / EC80ESP+ 2nd CAN	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP+ Integrated TPMS: Z228999 Bendix / EC80ESP+ Integrated TPMS	Z228999	Mitigation fix Vendor Fix
Bendix EC80ESP 6S/6M: Z266494 Bendix / EC80ESP 6S/6M	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z266494 Bendix / EC80ESP PLC	Z266494	Mitigation fix Vendor Fix Vendor Fix
Bendix EC80ESP 2nd CAN: Z266494 Bendix / EC80ESP 2nd CAN	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP CAN Gateway: Z266494 Bendix / EC80ESP CAN Gateway	Z266494	Mitigation fix Vendor Fix
Bendix EC80ESP 4S/4M: Z286098 Bendix / EC80ESP 4S/4M	Z286098	Mitigation fix Vendor Fix
Bendix EC80ESP PLC: Z286098 Bendix / EC80ESP PLC	Z286098	Mitigation fix Vendor Fix Vendor Fix

References

25 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://www.cisa.gov/uscert/sites/default/files/p…	external
https://www.cisa.gov/uscert/ncas/tips/ST04-014	external
https://www.cisa.gov/news-events/ics-alerts/ics-a…	external
https://www.cisa.gov/sites/default/files/recommen…	external
https://www.cisa.gov/news-events/news/targeted-cy…	external
https://www.cisa.gov/secure-our-world/teach-emplo…	external
https://www.cisa.gov/news-events/news/avoiding-so…	external
https://cwe.mitre.org/data/definitions/121.html	external
https://www.cve.org/CVERecord?id=CVE-2026-67560	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external
https://cwe.mitre.org/data/definitions/787.html	external
https://www.cve.org/CVERecord?id=CVE-2026-68967	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external
https://cwe.mitre.org/data/definitions/798.html	external
https://www.cve.org/CVERecord?id=CVE-2026-71396	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external

Acknowledgments

NMFTA Ben Gardiner

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Ben Gardiner"
        ],
        "organization": "NMFTA",
        "summary": "reported these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
        "title": "Legal Notice and Terms of Use"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to cause the loss of ABS functions, steering assist, speedometer, shifting capabilities, or disable automatic traction control.",
        "title": "Advisory Summary"
      },
      {
        "category": "other",
        "text": "Transportation Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "United States, Canada",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "United States",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Locate control system networks and remote devices behind firewalls and isolating them from business networks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also recommends users take the following measures to protect themselves from social engineering attacks:",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Do not click web links or open attachments in unsolicited email messages.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-26-237-05 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-26-237-05 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ncas/tips/ST04-014"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks"
      }
    ],
    "title": "Bendix EC80 Brake ECU",
    "tracking": {
      "current_release_date": "2026-08-25T06:00:00.000000Z",
      "generator": {
        "date": "2026-08-24T18:48:45.828256Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-26-237-05",
      "initial_release_date": "2026-08-25T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2026-08-25T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z228999",
                "product": {
                  "name": "Bendix EC80ESP+ J1708: Z228999",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP+ J1708"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z228999",
                "product": {
                  "name": "Bendix EC80ESP+ 6S/6M: Z228999",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP+ 6S/6M"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z228999",
                "product": {
                  "name": "Bendix EC80ESP+ PLC: Z228999",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP+ PLC"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z228999",
                "product": {
                  "name": "Bendix EC80ESP+ 2nd CAN: Z228999",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP+ 2nd CAN"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z228999",
                "product": {
                  "name": "Bendix EC80ESP+ Integrated TPMS: Z228999",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP+ Integrated TPMS"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z266494",
                "product": {
                  "name": "Bendix EC80ESP 6S/6M: Z266494",
                  "product_id": "CSAFPID-0006"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP 6S/6M"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z266494",
                "product": {
                  "name": "Bendix EC80ESP PLC: Z266494",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP PLC"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z266494",
                "product": {
                  "name": "Bendix EC80ESP 2nd CAN: Z266494",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP 2nd CAN"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z266494",
                "product": {
                  "name": "Bendix EC80ESP CAN Gateway: Z266494",
                  "product_id": "CSAFPID-0009"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP CAN Gateway"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z286098",
                "product": {
                  "name": "Bendix EC80ESP 4S/4M: Z286098",
                  "product_id": "CSAFPID-0010"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP 4S/4M"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Z286098",
                "product": {
                  "name": "Bendix EC80ESP PLC: Z286098",
                  "product_id": "CSAFPID-0011"
                }
              }
            ],
            "category": "product_name",
            "name": "EC80ESP PLC"
          }
        ],
        "category": "vendor",
        "name": "Bendix"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-67560",
      "cwe": {
        "id": "CWE-121",
        "name": "Stack-based Buffer Overflow"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:Y/2026-08-24T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/121.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-67560"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ],
          "url": "mailto:info@Bendix.com"
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ J1708: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 6S/6M: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0002"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ PLC: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 2nd CAN: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0004"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ Integrated TPMS: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0005"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 6S/6M: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0006"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 2nd CAN: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0008"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP CAN Gateway: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0009"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 4S/4M: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0010"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2026-68967",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected product is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:Y/2026-08-24T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/787.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-68967"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ],
          "url": "mailto:info@Bendix.com"
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ J1708: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 6S/6M: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0002"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ PLC: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 2nd CAN: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0004"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ Integrated TPMS: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0005"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 6S/6M: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0006"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 2nd CAN: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0008"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP CAN Gateway: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0009"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 4S/4M: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0010"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2026-71396",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The affected product uses hard-coded credentials, which could allow an attacker to disable automatic traction control.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:P/A:Y/2026-08-24T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005",
          "CSAFPID-0006",
          "CSAFPID-0007",
          "CSAFPID-0008",
          "CSAFPID-0009",
          "CSAFPID-0010",
          "CSAFPID-0011"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/798.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-71396"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ],
          "url": "mailto:info@Bendix.com"
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ J1708: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 6S/6M: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0002"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ PLC: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0003"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ 2nd CAN: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0004"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP+ Integrated TPMS: Z228999 users should update their firmware to version Z300822.",
          "product_ids": [
            "CSAFPID-0005"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 6S/6M: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0006"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 2nd CAN: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0008"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP CAN Gateway: Z266494 users should update their firmware to version Z302578.",
          "product_ids": [
            "CSAFPID-0009"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP 4S/4M: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0010"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "EC80ESP PLC: Z286098 users should update their firmware to version Z302579.",
          "product_ids": [
            "CSAFPID-0007",
            "CSAFPID-0011"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005",
            "CSAFPID-0006",
            "CSAFPID-0007",
            "CSAFPID-0008",
            "CSAFPID-0009",
            "CSAFPID-0010",
            "CSAFPID-0011"
          ]
        }
      ]
    }
  ]
}

CVE-2026-67560 (GCVE-0-2026-67560)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:54 – Updated: 2026-08-28 14:13

Title

Stack-based Buffer Overflow in Bendix EC80 Brake ECU

Summary

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedometer, and shifting.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.7 (High)


                        
                          CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-28 13:50 UTC

CWE

CWE-121

Assigner

icscert icscert root

References

2 references

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

11 products

Vendor	Product	Version
Bendix	EC80ESP+ J1708	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 6S/6M	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ PLC	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 2nd CAN	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ Integrated TPMS	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP 6S/6M	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP PLC	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 2nd CAN	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP CAN Gateway	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 4S/4M	Affected: Z286098 Unaffected: Z302579
Bendix	EC80ESP PLC	Affected: Z286098 Unaffected: Z302579

Date Public

2026-08-25 14:28

Credits

Ben Gardiner of NMFTA reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-67560",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T13:50:27.752340Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T14:13:53.473Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting."
            }
          ],
          "value": "Bendix EC80 Brake ECU\n is vulnerable to a stack-based buffer overflow, which may allow an \nattacker to crash the ECU. A crafted payload can then be used to \nremotely execute arbitrary code or inject arbitrary CAN bus traffic. \nThis could cause the loss of the ABS function, steering assist, \nspeedometer, and shifting."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-121",
              "description": "CWE-121",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:54:20.022Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Stack-based Buffer Overflow in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-67560",
    "datePublished": "2026-08-27T20:54:20.022Z",
    "dateReserved": "2026-08-10T16:03:40.493Z",
    "dateUpdated": "2026-08-28T14:13:53.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-68967 (GCVE-0-2026-68967)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:50 – Updated: 2026-08-28 14:13

Title

Out-of-bounds Write in Bendix EC80 Brake ECU

Summary

Bendix EC80 Brake ECU is vulnerable to an out-of-bounds write, which could allow an attacker to deliver a payload that could establish an arbitrary write primitive, which could crash the ECU.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.1 (High)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-28 13:56 UTC

CWE

CWE-787

Assigner

icscert icscert root

References

2 references

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

11 products

Vendor	Product	Version
Bendix	EC80ESP+ J1708	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 6S/6M	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ PLC	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 2nd CAN	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ Integrated TPMS	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP 6S/6M	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP PLC	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 2nd CAN	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP CAN Gateway	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 4S/4M	Affected: Z286098 Unaffected: Z302579
Bendix	EC80ESP PLC	Affected: Z286098 Unaffected: Z302579

Date Public

2026-08-25 14:28

Credits

Ben Gardiner of NMFTA reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-68967",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T13:56:16.152994Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T14:13:53.649Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\u0026nbsp;is vulnerable to an out-of-bounds write, which could allow an attacker \nto deliver a payload that could establish an arbitrary write primitive, \nwhich could crash the ECU."
            }
          ],
          "value": "Bendix EC80 Brake ECU\u00a0is vulnerable to an out-of-bounds write, which could allow an attacker \nto deliver a payload that could establish an arbitrary write primitive, \nwhich could crash the ECU."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:50:22.011Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Out-of-bounds Write in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-68967",
    "datePublished": "2026-08-27T20:50:22.011Z",
    "dateReserved": "2026-08-10T16:03:40.497Z",
    "dateUpdated": "2026-08-28T14:13:53.649Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-71396 (GCVE-0-2026-71396)

Vulnerability from cvelistv5 – Published: 2026-08-27 20:45 – Updated: 2026-08-28 15:57

Title

Use of Hard-coded Credentials in Bendix EC80 Brake ECU

Summary

Bendix EC80 Brake ECU uses hard-coded credentials, which could allow an attacker to disable automatic traction control.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

5.3 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-28 15:49 UTC

CWE

CWE-798 - Use of Hard-coded Credentials

Assigner

icscert icscert root

References

2 references

URL	Tags
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

11 products

Vendor	Product	Version
Bendix	EC80ESP+ J1708	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 6S/6M	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ PLC	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ 2nd CAN	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP+ Integrated TPMS	Affected: Z228999 Unaffected: Z300822
Bendix	EC80ESP 6S/6M	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP PLC	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 2nd CAN	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP CAN Gateway	Affected: Z266494 Unaffected: Z302578
Bendix	EC80ESP 4S/4M	Affected: Z286098 Unaffected: Z302579
Bendix	EC80ESP PLC	Affected: Z286098 Unaffected: Z302579

Date Public

2026-08-25 14:28

Credits

Ben Gardiner of NMFTA reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-71396",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-28T15:49:02.909444Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-28T15:57:46.738Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ J1708",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP+ Integrated TPMS",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z228999"
            },
            {
              "status": "unaffected",
              "version": "Z300822"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 6S/6M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 2nd CAN",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP CAN Gateway",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z266494"
            },
            {
              "status": "unaffected",
              "version": "Z302578"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP 4S/4M",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "EC80ESP PLC",
          "vendor": "Bendix",
          "versions": [
            {
              "status": "affected",
              "version": "Z286098"
            },
            {
              "status": "unaffected",
              "version": "Z302579"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ben Gardiner of NMFTA reported this vulnerability to CISA."
        }
      ],
      "datePublic": "2026-08-25T14:28:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix EC80 Brake ECU\u0026nbsp;uses hard-coded credentials, which could allow an attacker to disable automatic traction control."
            }
          ],
          "value": "Bendix EC80 Brake ECU\u00a0uses hard-coded credentials, which could allow an attacker to disable automatic traction control."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-27T20:45:52.804Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-237-05"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-237-05.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.\u003cdiv\u003e\u003cul\u003e\u003cli\u003eEC80ESP+ J1708: Users should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 6S/6M:\u0026nbsp;Users\n\n\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ PLC:\u0026nbsp;Users\u0026nbsp;\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ 2nd CAN:\nUsers\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP+ Integrated TPMS:\u0026nbsp;Users\u0026nbsp;should update their firmware to version Z300822.\u003c/li\u003e\u003cli\u003eEC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\u003c/li\u003e\u003cli\u003eEC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003cli\u003eEC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579.\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Bendix recommends users update their firmware to the most recent firmware version releases. Users that need more help should contact Bendix directly at info@Bendix.com.  *  EC80ESP+ J1708: Users should update their firmware to version Z300822.\n  *  EC80ESP+ 6S/6M:\u00a0Users\n\n\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ PLC:\u00a0Users\u00a0\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ 2nd CAN:\nUsers\u00a0should update their firmware to version Z300822.\n  *  EC80ESP+ Integrated TPMS:\u00a0Users\u00a0should update their firmware to version Z300822.\n  *  EC80ESP 6S/6M:\nUsers\nshould update their firmware to version Z302578.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 2nd CAN:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP CAN Gateway:\nUsers\n\nshould update their firmware to version Z302578.\n  *  EC80ESP 4S/4M:\nUsers\n\nshould update their firmware to version Z302579.\n  *  EC80ESP PLC:\nUsers\n\nshould update their firmware to version Z302579."
        }
      ],
      "source": {
        "advisory": "ICSA-26-237-05",
        "discovery": "EXTERNAL"
      },
      "title": "Use of Hard-coded Credentials in Bendix EC80 Brake ECU",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-71396",
    "datePublished": "2026-08-27T20:45:52.804Z",
    "dateReserved": "2026-08-10T16:03:40.501Z",
    "dateUpdated": "2026-08-28T15:57:46.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

ICSA-26-237-05

CVE-2026-67560 (GCVE-0-2026-67560)

CVE-2026-68967 (GCVE-0-2026-68967)

CVE-2026-71396 (GCVE-0-2026-71396)

Tags

Sightings

Nomenclature