TI-2025-02496 Aliases CVE-2025-2859 GHSA-x6xj-c9qw-4fjp

Improper Authentication vulnerability in saTECH BCU

LOW 31CWE-287Published 2025-03-28 · Updated 2025-04-04

Key facts

Attack vector: Adjacent network
Privileges required: None
User interaction: Passive
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00445 38th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Arteche	saTECH BCU	2.1.3	—	No fix listed	CNA

saTECH BCU VendorArteche Affected 2.1.3 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:arteche:satech_bcu_firmware:2.1.3:::::::*	2.1.3	Vulnerable	Arteche
cpe:2.3:h:arteche:satech_bcu:-:::::::*	not specified by NVD	Running on	Arteche

cpe:2.3:o:arteche:satech_bcu_firmware:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Arteche
cpe:2.3:h:arteche:satech_bcu:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Arteche

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-2859
2026-10-03 Alias added: GHSA-x6xj-c9qw-4fjp

References

Advisory 1

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-arteches-satech-bcu

TI-2025-02495 Privilege escalation vulnerability in saTECH BCU CVSS 4.0HIGH 8.5
TI-2025-02499 Weak Encoding for Password vulnerability in saTECH BCU CVSS 4.0MEDIUM 6.9
TI-2025-02498 Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU CVSS 4.0MEDIUM 6.9
TI-2025-02497 Exposure of Sensitive Information vulnerability in saTECH BCU CVSS 4.0MEDIUM 6.9
TI-2025-02500 Cross-site request forgery (CSRF) vulnerability in saTECH BCU CVSS 4.0MEDIUM 5.7
TI-2025-02502 Reflected Cross-Site Scripting (XSS) vulnerability in saTECH BCU CVSS 4.0LOW 2.4

See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences