CVE-2025-2859 — Improper Authentication vulnerability in saTECH BCU

CVE-2025-2859

Improper Authentication vulnerability in saTECH BCU PUBLISHED

Description (CNA)

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user.

Affected (CNA)

Vendor / product	Versions
Arteche / saTECH BCU	affected 2.1.3

CWE

CWE-287

References

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.