CVE-2025-2862mediumCWE-261

CVE-2025-2862: falha de média gravidade em Arteche saTECH BCU

Weak Encoding for Password vulnerability in saTECH BCU

Publicada em

Seguir esta CVE+ Monitorar saTECH BCU

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.2%
SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an attacker with access to the device's system or website to obtain the credentials, as the storage methods used are not strong enough in terms of encryption.
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Arteche · saTECH BCU
CVEs relacionadas — Arteche saTECH BCU

No mesmo produto, das mais perigosas para as menos.

CVE-2025-2859MEDIUMImproper Authentication vulnerability in saTECH BCUEPSS 0.4%CVE-2025-2860MEDIUMExposure of Sensitive Information vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2858HIGHPrivilege escalation vulnerability in saTECH BCUEPSS 0.3%CVE-2025-2861MEDIUMCleartext Transmission of Sensitive Information vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2864LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%CVE-2025-2865LOWReflected Cross-Site Scripting (XSS) vulnerability in saTECH BCUEPSS 0.2%