Wattsense Bridge
Approved changes feed: RSS · Atom
cpe:2.3:a:wattsense:wattsense_bridge:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wattsense (1eb4a8a8-0451-5f41-81f0-c0ca45eafd36) |
|---|---|
| Product | Wattsense Bridge (e2de0bfa-b245-5ba1-8c6d-7441de3990e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-26411 |
vulnerable | 2026-06-08 07:12:51.602607 |
Authenticated Arbitrary Python File Upload via Plugin Manager
An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device. This enables an attacker to gain remote root access to the device. An attacker needs a valid user account on the Wattsense web interface to be able to conduct this attack. This issue is fixed in recent firmware versions BSP >= 6.1.0.
Published: 2025-02-11T09:21:16.571Z
Updated: 2025-11-03T21:12:54.561Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26410 |
vulnerable | 2026-06-08 07:12:51.602326 |
Weak Hard-coded Credentials
The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that is exposed by the serial interface. The backdoor user has been removed in firmware BSP >= 6.4.1.
Published: 2025-02-11T09:20:22.708Z
Updated: 2025-11-03T21:12:53.153Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26409 |
vulnerable | 2026-06-08 07:12:51.601914 |
Access to Bootloader and Shell Over Serial Interface
A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices. After connecting to the interface, access to the bootloader is possible, as well as a Linux login prompt. The bootloader access can be used to gain a root shell on the device. This issue is fixed in recent firmware versions BSP >= 6.4.1.
Published: 2025-02-11T09:15:30.131Z
Updated: 2025-11-03T21:12:51.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26408 |
vulnerable | 2026-06-08 07:12:51.601521 |
Unprotected JTAG Interface
The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.
Published: 2025-02-11T09:14:28.700Z
Updated: 2025-11-03T21:12:50.335Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.