CVE-2025-2858CWE-269

Privilege escalation vulnerability in saTECH BCU

High · published March 28, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:L
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-03-28T13:08Z
EPSS history
Timeline
  • 28 MAR 13:08Z
    Privilege escalation vulnerability in saTECH BCU
    cvelistv5