CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. See the original NVD description below for full technical details.
CVE
CVE-2025-2864
Severity
MEDIUM
CVSS
6.1
EPSS
0.21%
Original NVD Description
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victim's browser (reflected XSS).
Related CVEs
Other vulnerabilities affecting the same vendor(s)