PatchTheCVEsatech bcu firmware vulnerabilities and fixes
Recent CVEs affecting satech bcu firmware, with upgrade or downgrade steps. 8 tracked.
Also searched as: satechbcufirmware.
satech bcu firmware has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-28. Highest priority: CVE-2025-2859 (score 49/100).
- CVE-2025-2865 MEDIUM 6.1 MITIGATE SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored
- CVE-2025-2864 MEDIUM 6.1 MITIGATE SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate websi
- CVE-2025-2863 HIGH 7.8 MITIGATE Cross-site request forgery (CSRF) vulnerability in the web application of saTECH BCU firmware version 2.1.3, w
- CVE-2025-2862 HIGH 7.5 MITIGATE SaTECH BCU, in its firmware version 2.1.3, performs weak password encryption
- CVE-2025-2861 HIGH 7.5 MITIGATE SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol
- CVE-2025-2860 MEDIUM 5.3 MITIGATE SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the cre
- CVE-2025-2859 CRITICAL 9.8 MITIGATE An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal
- CVE-2025-2858 HIGH 8.8 MITIGATE Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3
FAQ
How do I fix satech bcu firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is satech bcu firmware being exploited right now?
None of the tracked satech bcu firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which satech bcu firmware CVE should I patch first?
CVE-2025-2859 currently ranks highest (49/100): An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal.