Security Advisory

CVE-2025-2858

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-03-28 13:08:23
Last updated 2025-03-28 13:38:38
Assigner INCIBE
State PUBLISHED

Description

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.