2025-03-28 13:23:41
INCIBE
PUBLISHED
SaTECH BCU in its firmware version 2.1.3 allows an attacker to inject malicious code into the legitimate website owning the affected device, once the cookie is set. This attack only impacts the victims browser (reflected XSS).