CVE Database
/

CVE-2025-2864

Back to search

CVE-2025-2864

Published: Mar 28, 2025

Modified: Mar 28, 2025

PUBLISHED

Description

SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser (reflected XSS).

VendorProductVersions

Arteche

saTECH BCU

affected
2.1.3

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now