VulnAI

EUVD-2025-8624

ID: EUVD-2025-8624

Severity: high

CVSS v4: 8.5 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:L)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

Privilege escalation vulnerability in the saTECH BCU firmware version 2.1.3. An attacker with access to the CLI of the device could make use of the nice command to bypass all restrictions and elevate privileges as a superuser.

Timestamps

References

No references provided.