NMFTA revealed that a 2024 safety recall for Bendix’s EC80 heavy-truck brake controller also fixed serious security flaws, including a wirelessly reachable remote code execution vulnerability. The research showed that exploiting the flaws could crash the ECU, disable key vehicle functions, and require a battery disconnect to recover, while the findings were published at Black Hat USA 2026. #Bendix #EC80 #NMFTA #J2497 #PLC4TRUCKS #BlackHatUSA2026
Keypoints
- NMFTA disclosed serious flaws in Bendix’s EC80 brake controller.
- The recall quietly fixed a wireless remote code execution vulnerability.
- Researchers found buffer-handling issues and a hardcoded password.
- Exploits could crash the ECU and disable traction control.
- The issues affected about 450,000 units across three OEMs.
Read More: https://www.securityweek.com/truck-brake-controllers-safety-recall-doubled-as-hidden-security-fix/