Wattsense vulnerabilities
We track 2 vulnerabilities in Wattsense products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 11, 2025.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Wattsense vulnerabilities
- 8.8 High severity
Wattsense Bridge: Unrestricted Upload of File with Dangerous Type
An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device. This enables an attacker to gain remote root access to the device. An attacker needs a valid user a
- 9.8 Critical severity
Wattsense Bridge: Use of Hard-coded Credentials
The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that