{"id":"CVE-2025-26408","state":"PUBLISHED","title":"Unprotected JTAG Interface","description":"The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.","publishedAt":"2025-02-11T09:14:28.700Z","updatedAt":"2025-11-03T21:12:50.335Z","severity":{"score":6.1,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","source":"CISA-ADP"},"assigner":"SEC-VLab","products":["Wattsense Wattsense Bridge"],"affected":[{"vendor":"Wattsense","product":"Wattsense Bridge","defaultStatus":"affected","versions":[{"version":"*","status":"affected"}]}],"references":["https://r.sec-consult.com/wattsense","https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes","http://seclists.org/fulldisclosure/2025/Feb/9"],"weaknesses":["CWE-1191"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/26xxx/CVE-2025-26408.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-26408","state":"PUBLISHED","datePublished":"2025-02-11T09:14:28.700Z","dateUpdated":"2025-11-03T21:12:50.335Z","assignerShortName":"SEC-VLab","assignerOrgId":"551230f0-3615-47bd-b7cc-93e92e730bbf","dateReserved":"2025-02-10T07:48:38.352Z"},"containers":{"cna":{"title":"Unprotected JTAG Interface","descriptions":[{"lang":"en","value":"The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected."}],"affected":[{"vendor":"Wattsense","product":"Wattsense Bridge","defaultStatus":"affected","versions":[{"version":"*","status":"affected"}]}],"references":[{"url":"https://r.sec-consult.com/wattsense","tags":["third-party-advisory"]},{"url":"https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes","tags":["release-notes"]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1191","description":"CWE-1191 On-Chip Debug and Test Interface With Improper Access Control","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SEC-VLab","orgId":"551230f0-3615-47bd-b7cc-93e92e730bbf","dateUpdated":"2025-02-11T09:14:28.700Z"},"credits":[{"lang":"en","type":"finder","value":"Constantin Schieber-Knöbl | SEC Consult Vulnerability Lab"},{"lang":"en","type":"finder","value":"Stefan Schweighofer | SEC Consult Vulnerability Lab"},{"lang":"en","type":"finder","value":"Steffen Robertz | SEC Consult Vulnerability Lab"}],"impacts":[{"capecId":"CAPEC-702","descriptions":[{"lang":"en","value":"CAPEC-702 Exploiting Incorrect Chaining or Granularity of Hardware Debug Components"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires&nbsp;</span>more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team."}],"value":"The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team."}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":6.1,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-02-11T14:40:43.535274Z","id":"CVE-2025-26408","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-22T14:41:30.878Z"}},{"title":"CVE Program Container","references":[{"url":"http://seclists.org/fulldisclosure/2025/Feb/9"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T21:12:50.335Z"}}]}}}