JTAG Interface Vulnerability in Wattsense Bridge Devices
CVE-2025-26408
6.1MEDIUM
What is CVE-2025-26408?
Wattsense Bridge devices are susceptible to a vulnerability that allows attackers with physical access to the printed circuit board (PCB) to exploit the JTAG interface. This access permits full control over the device, enabling the extraction of sensitive information, as well as the modification and debugging of the device's firmware. The vulnerability impacts all known versions of the Wattsense Bridge, making it essential for users to take appropriate security measures.
Affected Version(s)
Wattsense Bridge *
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Constantin Schieber-Knöbl | SEC Consult Vulnerability Lab
Stefan Schweighofer | SEC Consult Vulnerability Lab
Steffen Robertz | SEC Consult Vulnerability Lab
