VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 28, 2025· Updated Mar 28, 2025

Reflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU

CVE-2025-2864

Description

SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser (reflected XSS).

Affected products

2
  • SaTECH/BCUllm-fuzzy
    Range: = 2.1.3
  • Arteche/saTECH BCUv5
    Range: 2.1.3

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.