CVE-2025-2861mediumCWE-319

CVE-2025-2861: fallo de gravedad media en Arteche saTECH BCU

Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear saTECH BCU

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.9epss 0.2%
SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Arteche · saTECH BCU
CVEs relacionadas — Arteche saTECH BCU

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-2859MEDIUMImproper Authentication vulnerability in saTECH BCUEPSS 0.4%CVE-2025-2860MEDIUMExposure of Sensitive Information vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2858HIGHPrivilege escalation vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2864LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2862MEDIUMWeak Encoding for Password vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2865LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%