Bender / ebee — Vulnerabilities & Security Advisories 8

Bender / ebee is an industrial control system (ICS) and SCADA device manufacturer primarily used in critical infrastructure sectors. Historically, their devices have been vulnerable to multiple remote code execution (RCE), cross-site scripting (XSS), and privilege escalation flaws, with eight CVEs documented to date. Notable security characteristics include hardcoded credentials in some models and insufficient input validation. Major incidents include exploitation of their devices in botnet campaigns targeting water treatment facilities and energy grids, highlighting the critical risks posed by insecure ICS implementations in operational technology environments.