by Kastro
Paper/Archive/CVE-2025-26410

CVE-2025-26410

Wattsense Wattsense Bridge — Weak Hard-coded Credentials

EPSS 0.7%public exploitCVSS 9.8
critical.is priorityof 100
50
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.9.539 × 2010.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that is exposed by the serial interface. The backdoor user has been removed in firmware BSP >= 6.4.1.

Affected

ProductAffectedFixed inSource
Wattsense Bridge< 6.4.16.4.1CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupr.sec-consult.com/wattsenserefsupport.wattsense.com/hc/en-150/articles/13366066529437-Release-Notesrefseclists.org/fulldisclosure/2025/Feb/9