What’s Vulnerable › Vulnerabilities
CVE-2025-2859: Improper Authentication vulnerability in saTECH BCU
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-28 · updated 2026-06-17
- Weakness: CWE-287
Description
An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user.
Affected products
- Arteche saTECH BCU: 2.1.3
References
Get alerted when CVE-2025-2859 or the next vulnerability affects your stack