CVE-2025-2861CWE-319

Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU

Medium · published March 28, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
14.8
In the wild
Unconfirmed
What it is

SaTECH BCU in its firmware version 2.1.3 uses the HTTP protocol. The use of the HTTP protocol for web browsing has the problem that information is exchanged in unencrypted text. Since sensitive data such as credentials are exchanged, an attacker could obtain them and log in legitimately.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00245 · 14.8th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-03-28T13:11Z
EPSS history
Timeline
  • 28 MAR 13:11Z
    Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU
    cvelistv5