Stack-based Buffer Overflow in Bendix EC80 Brake ECU
Bendix EC80 Brake ECU
is vulnerable to a stack-based buffer overflow, which may allow an
attacker to crash the ECU. A crafted payload can then be used to
remotely execute arbitrary code or inject arbitrary CAN bus traffic.
This could cause the loss of the ABS function, steering assist,
speedometer, and shifting.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EC80ESP+ J1708
Vendor
Bendix
Product
EC80ESP+ J1708
Platforms
Unknown
Default status
unaffected
EC80ESP+ J1708 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z228999
affected
Unavailable
Unavailable
Unavailable
None listed
Z300822
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP+ 6S/6M
Vendor
Bendix
Product
EC80ESP+ 6S/6M
Platforms
Unknown
Default status
unaffected
EC80ESP+ 6S/6M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z228999
affected
Unavailable
Unavailable
Unavailable
None listed
Z300822
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP+ PLC
Vendor
Bendix
Product
EC80ESP+ PLC
Platforms
Unknown
Default status
unaffected
EC80ESP+ PLC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z228999
affected
Unavailable
Unavailable
Unavailable
None listed
Z300822
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP+ 2nd CAN
Vendor
Bendix
Product
EC80ESP+ 2nd CAN
Platforms
Unknown
Default status
unaffected
EC80ESP+ 2nd CAN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z228999
affected
Unavailable
Unavailable
Unavailable
None listed
Z300822
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP+ Integrated TPMS
Vendor
Bendix
Product
EC80ESP+ Integrated TPMS
Platforms
Unknown
Default status
unaffected
EC80ESP+ Integrated TPMS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z228999
affected
Unavailable
Unavailable
Unavailable
None listed
Z300822
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP 6S/6M
Vendor
Bendix
Product
EC80ESP 6S/6M
Platforms
Unknown
Default status
unaffected
EC80ESP 6S/6M · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z266494
affected
Unavailable
Unavailable
Unavailable
None listed
Z302578
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP PLC
Vendor
Bendix
Product
EC80ESP PLC
Platforms
Unknown
Default status
unaffected
EC80ESP PLC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z266494
affected
Unavailable
Unavailable
Unavailable
None listed
Z302578
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP 2nd CAN
Vendor
Bendix
Product
EC80ESP 2nd CAN
Platforms
Unknown
Default status
unaffected
EC80ESP 2nd CAN · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Z266494
affected
Unavailable
Unavailable
Unavailable
None listed
Z302578
unaffected
Unavailable
Unavailable
Unavailable
None listed
EC80ESP CAN Gateway
Vendor
Bendix
Product
EC80ESP CAN Gateway
Platforms
Unknown
Default status
unaffected
EC80ESP CAN Gateway · Scoped product and version facts