CVE-2025-26408 – Wattsense Bridge JTAG Interface Over-Access Vulnerability

The following table lists the changes that have been made to the
CVE-2025-26408 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 551230f0-3615-47bd-b7cc-93e92e730bbf

    Feb. 11, 2025

    Action Type Old Value New Value
    Added Description The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device’s firmware. All known versions are affected.
    Added CWE CWE-1191
    Added Reference https://r.sec-consult.com/wattsense
    Added Reference https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes
Share the Post:

Related Posts