Arteche saTECH BCU Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Arteche's saTECH BCU control and automation equipment, specifically in firmware version 2.1.3. This vulnerability allows an attacker to store malicious resources on the web server, which can then be interpreted by victim users. The exploitation requires knowledge of the web application, as the attacker must send a malicious request that directs victims to a harmful website under the attacker's control.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can upgrade to saTECH BCU firmware version 2.2.1 to address this vulnerability.