Medium severity6.1NVD Advisory· Published Mar 28, 2025· Updated Jun 17, 2026
CVE-2025-2864
CVE-2025-2864
Description
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser (reflected XSS).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Arteche/saTECH BCUv5Range: 2.1.3
Patches
Vulnerability mechanics
References
1- www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcunvdThird Party Advisory
News mentions
0No linked articles in our index yet.