CVE-2025-26408CWE-1191

Unprotected JTAG Interface

Medium · published February 11, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00294 · 20.8th percentile
Weakness
CWE-1191 · On-Chip Debug and Test Interface With Improper Access Control
Published
2025-02-11T09:14Z
EPSS history
Timeline
  • 11 FEB 09:14Z
    Unprotected JTAG Interface
    cvelistv5