CVE-2025-2861

CVE-2025-2861 concerns SaTECH BCU firmware 2.1.3 that communicates over HTTP, exposing credentials and enabling credential disclosure due to unencrypted data transmission. The provided sources (NVD/Red Hat/CVE records) describe the affected device and the risk of credential exposure but do not sp...

CVE-2025-2860

CVE-2025-2860 affects SaTECH BCU firmware 2.1.3. An authenticated attacker can access user credential information via a web-accessible path to an XML file, with access independent of user privileges (path must be known). The vulnerability is described across NVD/Red Hat and CVE records, indicatin...

CVE-2025-2860 Exposure of Sensitive Information vulnerability in saTECH BCU

SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web .xml file. In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website...

CVE-2025-2860 Exposure of Sensitive Information vulnerability in saTECH BCU

SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web .xml file. In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website...

CVE-2025-2859 Improper Authentication vulnerability in saTECH BCU

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

CVE-2025-2859 Improper Authentication vulnerability in saTECH BCU

An attacker with network access, could capture traffic and obtain user cookies, allowing the attacker to steal the active user session and make changes to the device via web, depending on the privileges obtained by the user...

CVE-2025-2858 Privilege escalation vulnerability in saTECH BCU

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser...

CVE-2025-2858 Privilege escalation vulnerability in saTECH BCU

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser...

CVE-2025-2858

CVE-2025-2858 describes a privilege-escalation in saTECH BCU firmware 2.1.3. An attacker with CLI access could use the nice command to bypass restrictions and elevate to superuser. Multiple sources (NVD, Red Hat, CVE lists, and related enrichments) confirm the vulnerable component and impact as d...

Arteche saTECH BCU 授权问题漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. An authorization issue vulnerability exists in the Arteche saTECH BCU version 2.1.3, which originates from an attacker being able to capture traffic and obtain a user cookie to steal active sessions and change the device based on...

Arteche saTECH BCU 安全漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in Arteche saTECH BCU version 2.1.3, which originates from an attacker being able to bypass all restrictions and elevate to superuser privileges via the nice command...

Arteche saTECH BCU 信息泄露漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. An information disclosure vulnerability exists in the Arteche saTECH BCU version 2.1.3 that originates from an authenticated attacker having access to user credential information regardless of the user's privileges on the website...

Arteche saTECH BCU 跨站脚本漏洞

The Arteche saTECH BCU is a flight room control unit from Arteche. A cross-site scripting vulnerability exists in the Arteche saTECH BCU version 2.1.3, which stems from a reflected cross-site scripting attack that could affect the victim's browser...

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4008

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

CVE-2024-4009

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4009 Replay Attack in KNX Secure Devices

Replay Attack in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to capture/replay KNX telegram to local KNX Bus-System...

CVE-2024-4008 FDSK Leak in KNX Secure Devices

FDSK Leak in ABB, Busch-Jaeger, FTS Display version 1.00 and BCU version 1.3.0.33 allows attacker to take control via access to local KNX Bus-System...

PT-2024-4065

Name of the Vulnerable Software and Affected Versions: ABB Display versions 1.00 BCU version 1.3.0.33 ABB Display 55 affected versions not specified ABB Display 63 affected versions not specified ABB Display 70 affected versions not specified RoomTouch 4 affected versions not specified Descriptio...

CVE-2023-6689 Cross-Site Request Forgery in EFACEC BCU 500

A successful CSRF attack could force the user to perform state changing requests on the application. If the victim is an administrative account, a CSRF attack could compromise the entire web application...