CVE-2025-41708 — Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface

CVE-2025-41708

Cleartext Transmission of Sensitive Data via Insecure HTTP Web Interface PUBLISHED

Description (CNA)

Due to an unsecure default configuration HTTP is used instead of HTTPS for the web interface. An unauthenticated attacker on the same network could exploit this to learn sensitive data during transmission.

Affected (CNA)

Vendor / product	Versions
Bender / CC612	affected 0.0.0 through all versions
Bender / CC613	affected 0.0.0 through all versions
Bender / ICC15xx	affected 0.0.0 through all versions
Bender / ICC16xx	affected 0.0.0 through all versions
Bender / ICC13xx	affected 0.0.0 through all versions

CWE

CWE-319

References

https://certvde.com/de/advisories/VDE-2025-084

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.