CVE-2025-2858 — Privilege escalation vulnerability in saTECH BCU

CVE-2025-2858

Privilege escalation vulnerability in saTECH BCU PUBLISHED

Description (CNA)

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.

Affected (CNA)

Vendor / product	Versions
Arteche / saTECH BCU	affected 2.1.3

CWE

CWE-269

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.