JTAG Interface Vulnerability in Wattsense Bridge Devices
CVE-2025-26408

6.1MEDIUM

Key Information:

Vendor

Wattsense

Vendor
CVE Published:
11 February 2025

What is CVE-2025-26408?

Wattsense Bridge devices are susceptible to a vulnerability that allows attackers with physical access to the printed circuit board (PCB) to exploit the JTAG interface. This access permits full control over the device, enabling the extraction of sensitive information, as well as the modification and debugging of the device's firmware. The vulnerability impacts all known versions of the Wattsense Bridge, making it essential for users to take appropriate security measures.

Affected Version(s)

Wattsense Bridge *

References

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Constantin Schieber-Knöbl | SEC Consult Vulnerability Lab
Stefan Schweighofer | SEC Consult Vulnerability Lab
Steffen Robertz | SEC Consult Vulnerability Lab
.