medium6.1
CVE-2025-2864
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is…
Impact
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser (reflected XSS).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arteche | Satech Bcu Firmware | Version 2.1.3 |