CVE-2025-26410 Weak Hard-coded Credentials
Attackers can use hard-coded credentials to log into Wattsense Bridge devices via serial interface, gaining unauthorized access and control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-26410?
CVE-2025-26410 is a critical vulnerability in Wattsense Bridge, published on 11 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that is exposed by the serial interface. The backdoor user has been removed in firmware BSP >= 6.4.1.
Weakness: CWE-798
Which versions are affected by CVE-2025-26410?
How do I fix CVE-2025-26410?
No fix has been published for CVE-2025-26410 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-26410 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-26410 exists.
Sources
Also known as GHSA-jj4x-g447-hm4m.