Arteche saTECH BCU HTTP Protocol Vulnerability Allowing Credential Theft

A vulnerability exists in Arteche's saTECH BCU control and automation equipment, specifically in firmware version 2.1.3. The issue arises from the use of the unencrypted HTTP protocol for web browsing, which exposes sensitive data such as credentials to interception by attackers. This vulnerability could allow an attacker to capture credentials and gain unauthorized access to the device.

Impact

Exploitation of this vulnerability could lead to the interception of unencrypted credentials, allowing attackers to log in to the affected device legitimately.

Remediation

Users can upgrade to saTECH BCU firmware version 2.2.1 to address this vulnerability.