The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.
Description: CAPEC-702 Exploiting Incorrect Chaining or Granularity of Hardware Debug Components
Solutions
The device is meant to be installed at a restricted access physical location according to the vendor and exploitation requires more attacker knowledge and higher physical access. The issue will be put in the backlog of the Wattsense team.
Configurations
Workarounds
Exploits
Credits
finder
Constantin Schieber-Knöbl | SEC Consult Vulnerability Lab
finder
Stefan Schweighofer | SEC Consult Vulnerability Lab