Vulnerability Details CVE-2025-2860
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.0%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2025-2860
-
cpe:2.3:h:arteche:satech_bcu:-
-
cpe:2.3:o:arteche:satech_bcu_firmware:2.1.3