CVE-2025-26408
The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.
Scoring
- CVSS base score
- 0
- EPSS probability
- 0.29%
- CWE
- CWE-1191
- Published
- 2025-02-11
- Last modified
- 2026-03-13
Affected products
- Wattsense Wattsense Bridge
Weakness type
Related vulnerabilities
- CVE-2026-15203 — Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
- CVE-2026-8989 — Open Recovery Mode
- CVE-2026-8988 — Access to Bootloader
- CVE-2024-36319 — Debug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to...
- CVE-2025-52533 — Improper Access Control in an on-chip debug interface could allow a privileged attacker to enable a...
- CVE-2025-15083 — TOZED ZLT M30s UART on-chip debug and test interface with improper access control
- CVE-2025-36755 — CleverDisplay BlueOne unauthorized BIOS access through physical USB keyboard
- CVE-2025-12114 — Serial Console Enabled