Beveiligingsadvies

CVE-2025-2865

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-28 13:24:47
Laatst bijgewerkt 2025-03-28 14:32:18
Toegewezen door INCIBE
CVSS-score 2.4
Status PUBLISHED

Beschrijving

SaTECH BCU, in its firmware version 2.1.3, could allow XSS attacks and other malicious resources to be stored on the web server. An attacker with some knowledge of the web application could send a malicious request to the victim users. Through this request, the victims would interpret the code (resources) stored on another malicious website owned by the attacker.