Arteche saTECH BCU Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Arteche's saTECH BCU firmware version 2.1.3. This vulnerability allows an attacker to inject malicious code into the legitimate website of the affected device, which is then executed in the context of the victim's browser. The attack can only be carried out after the cookie is set.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where injected malicious code is executed in the context of the user's browser.

Remediation

Users can upgrade to saTECH BCU firmware version 2.2.1 to address this vulnerability.