CVE-2025-2860mediumCWE-200

CVE-2025-2860: falha de média gravidade em Arteche saTECH BCU

Exposure of Sensitive Information vulnerability in saTECH BCU

Publicada em

Seguir esta CVE+ Monitorar saTECH BCU

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.3%
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Arteche · saTECH BCU
CVEs relacionadas — Arteche saTECH BCU

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2859MEDIUMImproper Authentication vulnerability in saTECH BCUEPSS 0.4%CVE-2025-2858HIGHPrivilege escalation vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2861MEDIUMCleartext Transmission of Sensitive Information vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2864LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2862MEDIUMWeak Encoding for Password vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2865LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%