漏洞标题
未受保护的JTAG接口
漏洞描述信息
Wattsense Bridge设备的JTAG接口可以通过对PCB的物理访问来访问。连接到该接口后,可以完全访问设备。这使得攻击者能够提取信息、修改和调试设备的固件。所有已知版本均受影响。
CVSS信息
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
授权机制缺失
漏洞标题
Unprotected JTAG Interface
漏洞描述信息
The JTAG interface of Wattsense Bridge devices can be accessed with physical access to the PCB. After connecting to the interface, full access to the device is possible. This enables an attacker to extract information, modify and debug the device's firmware. All known versions are affected.
CVSS信息
N/A
漏洞类别
N/A