CVE-2025-2860 — Exposure of Sensitive Information vulnerability in saTECH BCU
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to ex…
Published: 2025-03-28 · CVSS: 6.9 · CVSS 4.0
SaTECH BCU in its firmware version 2.1.3, allows an authenticated attacker to access information about the credentials that users have within the web (.xml file). In order to exploit this vulnerability, the attacker must know the path, regardless of the user's privileges on the website.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7