CVE-2025-2860mediumCWE-200

CVE-2025-2860: medium-severity vulnerability in Arteche saTECH BCU

Exposure of Sensitive Information vulnerability in saTECH BCU

Published

Follow this CVE+ Monitor saTECH BCU

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.3%
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Arteche · saTECH BCU
Related CVEs — Arteche saTECH BCU

In the same product, most dangerous first.

CVE-2025-2859MEDIUMImproper Authentication vulnerability in saTECH BCUEPSS 0.4%CVE-2025-2858HIGHPrivilege escalation vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2861MEDIUMCleartext Transmission of Sensitive Information vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2864LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2862MEDIUMWeak Encoding for Password vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2865LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%