Threats tagged 'bender-gmbh-co-kg'

The Bender EDGE500IP device contains vulnerabilities in its Linux kernel TLS implementation (CVE-2025-39682) and the AF_ALG crypto socket interface (CVE-2025-39964). These vulnerabilities can be exploited by an attacker with local code execution capabilities to compromise the confidentiality, integrity, and availability of the device. Exploitation in the wild is confirmed, and the issue is considered critical. No specific affected versions or patch information is provided.

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected.