What’s Vulnerable › Vulnerabilities

CVE-2025-2858: Privilege escalation vulnerability in saTECH BCU

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-28 · updated 2026-06-17
• Weakness: CWE-269

Description

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.

Affected products

• Arteche saTECH BCU: 2.1.3

References

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu

Get alerted when CVE-2025-2858 or the next vulnerability affects your stack