What’s Vulnerable › Vulnerabilities
CVE-2025-2861: Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-28 · updated 2026-06-17
- Weakness: CWE-319
Description
SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately.
Affected products
- Arteche saTECH BCU: 2.1.3
References
Get alerted when CVE-2025-2861 or the next vulnerability affects your stack