← back
CVE-2025-2859

Improper Authentication vulnerability in saTECH BCU

CVSS 6.9 MEDIUMEPSS 0.4%CWE-287
An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Arteche · saTECH BCU

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →