Vulnerability · Published Feb 11, 2025 · Assigned by SEC-VLab

CVE-2025-26411Authenticated Arbitrary Python File Upload via Plugin Manager

High 8.8

In plain English

A high-severity unrestricted file upload in Wattsense Bridge from Wattsense. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High

Exploit odds (30 days)0.7%top 46.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

An authenticated attacker is able to use the Plugin Manager of the web interface of the Wattsense Bridge devices to upload malicious Python files to the device. This enables an attacker to gain remote root access to the device. An attacker needs a valid user account on the Wattsense web interface to be able to conduct this attack. This issue is fixed in recent firmware versions BSP >= 6.1.0.

Affected products (as reported)

Vendor	Product	Versions
Wattsense	Wattsense Bridge	0 – before 6.1.0

Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://r.sec-consult.com/wattsense third-party-advisory
https://support.wattsense.com/hc/en-150/articles/13366066529437-Release-Notes release-notes
http://seclists.org/fulldisclosure/2025/Feb/9