Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Wattsense Clear all filters
TI-2025-19368 CVE-2025-26411 · GHSA-h9f9-r2j7-9685

Authenticated Arbitrary Python File Upload via Plugin Manager

Priority HIGH 73

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00702 Published 2025-02-11 Fixed in 6.1.0 CWE-434
TI-2025-19367 CVE-2025-26410 · GHSA-jj4x-g447-hm4m

Weak hard-coded credentials in Wattsense Bridge

Priority HIGH 82

The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00718 Published 2025-02-11 Fixed in 6.4.1 CWE-798
TI-2025-19366 CVE-2025-26409 · GHSA-9cmp-ppm3-hp8w

Access to Bootloader and Shell Over Serial Interface

Priority HIGH 65

A serial interface can be accessed with physical access to the PCB of Wattsense Bridge devices.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00333 Published 2025-02-11 Fixed in 6.4.1 CWE-1191
TI-2025-19365 CVE-2025-26408 · GHSA-hrwq-g9x9-jmq2

Unprotected JTAG Interface

Priority MEDIUM 62

The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB.

CVSS 3.1MEDIUM 6.1 Physical No auth No interaction EPSS 0.00294 Published 2025-02-11 No fix listed CWE-1191