Read the docs

Arteche

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Arteche records in CISA KEV

No Arteche vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Satech Bcu Firmware 8 records LOW

Records

8 records

TI-2025-02495 CVE-2025-2858 · GHSA-74w3-v342-q9gv

Privilege escalation vulnerability in saTECH BCU

Priority LOW 39

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00285 Published 2025-03-28 No fix listed CWE-269
TI-2025-02496 CVE-2025-2859 · GHSA-x6xj-c9qw-4fjp

Improper Authentication vulnerability in saTECH BCU

Priority LOW 31

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the u…

CVSS 4.0MEDIUM 6.9 Adjacent network No auth User interaction EPSS 0.00445 Published 2025-03-28 No fix listed CWE-287
TI-2025-02497 CVE-2025-2860 · GHSA-x542-2cq7-f2p3

Exposure of Sensitive Information vulnerability in saTECH BCU

Priority LOW 30

SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file).

CVSS 4.0MEDIUM 6.9 Adjacent network Low privileges No interaction EPSS 0.00299 Published 2025-03-28 No fix listed CWE-200
TI-2025-02500 CVE-2025-2863 · GHSA-hprf-f9v4-9r3r

Cross-site request forgery (CSRF) vulnerability in saTECH BCU

Priority LOW 24

Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, which could allow an unauthenticated local attacker to exploit active administrator sessions and perform malici…

CVSS 4.0MEDIUM 5.7 Local No auth User interaction EPSS 0.001 Published 2025-03-28 No fix listed CWE-352
TI-2025-02501 CVE-2025-2864 · GHSA-wc34-fgpq-8hg7

Reflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU

Priority LOW 10

SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set.

CVSS 4.0LOW 2.0 Adjacent network No auth User interaction EPSS 0.00233 Published 2025-03-28 No fix listed CWE-79
Open these records in search →