CVE Feed

    Dashboard / CVE / CVE-2025-2862

    CVE-2025-2862

    SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an attacker with access to the device's system or website to obtain the credentials, as the storage methods used are not strong enough in terms of encryption.

    Published:Mar 28, 2025
    Last Modified:Oct 15, 2025
    EPS:Mar 28, 2025
    EPSS Score:0.00016
    CVSS Score:7.5

    Affected Products

    Vendor
    Arteche
    Product
    Satech Bcu
    Vendor
    Arteche
    Product
    Satech Bcu Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-261 Weak Encoding for Password

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-55 Rainbow Table Password Cracking

    Related CVEs

    CVE-2025-2865 (CVSS 2.4) — SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored …
    CVE-2025-2864 (CVSS 2) — SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate websi…
    CVE-2025-2863 (CVSS 5.7) — Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, w…
    CVE-2025-2861 (CVSS 6.9) — SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing…
    CVE-2025-2860 (CVSS 6.9) — SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the cre…
    CVE-2025-2859 (CVSS 6.9) — An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal…
    CVE-2025-2858 (CVSS 8.5) — Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CL…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High