CVE-2025-26408 - Vulnerability Details - OpenCVE

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://r.sec-consult.com/wattsense
https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes

History

Tue, 18 Feb 2025 18:45:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}`

Tue, 11 Feb 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.1, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 11 Feb 2025 09:30:00 +0000

Type	Values Removed	Values Added
Description		The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.
Title		Unprotected JTAG Interface
Weaknesses		CWE-1191
References		https://r.sec-consult.com/wattsense https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes

MITRE

Status: PUBLISHED

Assigner: SEC-VLab

Published: 2025-02-11T09:14:28.700Z

Updated: 2025-02-18T17:51:43.084Z

Reserved: 2025-02-10T07:48:38.352Z

Link: CVE-2025-26408

Vulnrichment

Updated: 2025-02-11T14:41:59.859Z

NVD

Status : Awaiting Analysis

Published: 2025-02-11T10:15:09.617

Modified: 2025-02-18T18:15:36.097

Link: CVE-2025-26408

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-26408", "assignerOrgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "state": "PUBLISHED", "assignerShortName": "SEC-VLab", "dateReserved": "2025-02-10T07:48:38.352Z", "datePublished": "2025-02-11T09:14:28.700Z", "dateUpdated": "2025-02-18T17:51:43.084Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Wattsense Bridge", "vendor": "Wattsense", "versions": [{"status": "affected", "version": "*"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Constantin Schieber-Kn\u00f6bl | SEC Consult Vulnerability Lab"}, {"lang": "en", "type": "finder", "value": "Stefan Schweighofer | SEC Consult Vulnerability Lab"}, {"lang": "en", "type": "finder", "value": "Steffen Robertz | SEC Consult Vulnerability Lab"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.<br><br>"}], "value": "The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected."}], "impacts": [{"capecId": "CAPEC-702", "descriptions": [{"lang": "en", "value": "CAPEC-702 Exploiting Incorrect Chaining or Granularity of Hardware Debug Components"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1191", "description": "CWE-1191 On-Chip Debug and Test Interface With Improper Access Control", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "shortName": "SEC-VLab", "dateUpdated": "2025-02-11T09:14:28.700Z"}, "references": [{"tags": ["third-party-advisory"], "url": "https://r.sec-consult.com/wattsense"}, {"tags": ["release-notes"], "url": "https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires </span>more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team."}], "value": "The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires\u00a0more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team."}], "source": {"discovery": "EXTERNAL"}, "title": "Unprotected JTAG Interface", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-11T14:40:43.535274Z", "id": "CVE-2025-26408", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-18T17:51:43.084Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-26408", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-11T14:40:43.535274Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T14:41:59.859Z"}}], "cna": {"title": "Unprotected JTAG Interface", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Constantin Schieber-Kn\u00f6bl | SEC Consult Vulnerability Lab"}, {"lang": "en", "type": "finder", "value": "Stefan Schweighofer | SEC Consult Vulnerability Lab"}, {"lang": "en", "type": "finder", "value": "Steffen Robertz | SEC Consult Vulnerability Lab"}], "impacts": [{"capecId": "CAPEC-702", "descriptions": [{"lang": "en", "value": "CAPEC-702 Exploiting Incorrect Chaining or Granularity of Hardware Debug Components"}]}], "affected": [{"vendor": "Wattsense", "product": "Wattsense Bridge", "versions": [{"status": "affected", "version": "*"}], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires\u00a0more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires </span>more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team.", "base64": false}]}], "references": [{"url": "https://r.sec-consult.com/wattsense", "tags": ["third-party-advisory"]}, {"url": "https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes", "tags": ["release-notes"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.", "supportingMedia": [{"type": "text/html", "value": "The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.<br><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1191", "description": "CWE-1191 On-Chip Debug and Test Interface With Improper Access Control"}]}], "providerMetadata": {"orgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "shortName": "SEC-VLab", "dateUpdated": "2025-02-11T09:14:28.700Z"}}}, "cveMetadata": {"cveId": "CVE-2025-26408", "state": "PUBLISHED", "dateUpdated": "2025-02-18T17:51:43.084Z", "dateReserved": "2025-02-10T07:48:38.352Z", "assignerOrgId": "551230f0-3615-47bd-b7cc-93e92e730bbf", "datePublished": "2025-02-11T09:14:28.700Z", "assignerShortName": "SEC-VLab"}, "dataVersion": "5.1"}