Reflected XSS Vulnerability in SaTECH BCU Firmware
CVE-2025-2864
2LOW
What is CVE-2025-2864?
The vulnerability in SaTECH BCU firmware version 2.1.3 enables attackers to exploit cookie settings, allowing the injection of malicious code into legitimate websites accessed by victims. This vulnerability primarily affects the user's browser, facilitating a reflected XSS attack that could lead to unauthorized actions or information theft.
Affected Version(s)
saTECH BCU 2.1.3
References
CVSS V4
Score:
2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
AarĂłn Flecha
Gabriel VĂa Echezarreta