CVE-2025-2862
Weak Encoding for Password vulnerability in saTECH BCU
- State
- Published
- Severity
- 6.9 Medium
- Published
- Mar 28, 2025
- Updated
- Mar 28, 2025
- Reserved
- Mar 27, 2025
Description
SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption. This allows an attacker with access to the device's system or website to obtain the credentials, as the storage methods used are not strong enough in terms of encryption.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.9 Medium | CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | INCIBE |
Weaknesses
- CWE-261 Weak Encoding for Password
Affected Products
| Product | Versions |
|---|---|
saTECH BCUArteche |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.