Session Theft Vulnerability in Arteche Devices
CVE-2025-2859
6.9MEDIUM
What is CVE-2025-2859?
A vulnerability exists in Arteche devices that enables an attacker with network access to intercept user traffic, potentially compromising cookies and active sessions. This could allow unauthorized modifications to device settings, depending on user privileges. Protecting devices on your network is essential to mitigate risks associated with unauthorized access.
Affected Version(s)
saTECH BCU 2.1.3
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
AarĂłn Flecha
Gabriel VĂa Echezarreta