← CVE Intelligence

CVE-2025-2865

Reflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU PUBLISHED

Description (CNA)

SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored on the web server. An attacker with some knowledge of the web application could send a malicious request to the victim users. Through this request, the victims would interpret the code (resources) stored on another malicious website owned by the attacker.

Affected (CNA)

Vendor / productVersions
Arteche / saTECH BCUaffected 2.1.3

CWE

CWE-942

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.