Security Advisory
CVE-2025-2864
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victims browser (reflected XSS).