Skip to content
OpenAdvisories

Vendor

TBEA

6 known vulnerabilities.

TBEA at a glance

Last 12 months
6
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 6 vulnerabilities, 3 critical September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202663
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

TBEA TLogger (TBEA Communication Box 3rd Generation) 6
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • High 8.8
    CVE-2025-15683

    Multiple Unauthenticated Denial-of-Service Conditions

    TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the …

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • High 8.7
    CVE-2025-15682

    Unauthenticated Resource Exhaustion

    TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/ endpoint, causing the web server to create persistent files containing attacke…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Critical 9.2
    CVE-2025-15681

    Insufficient Webserver Authentication

    TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providi…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Low 2.4
    CVE-2025-15680

    Information Disclosure via UART

    TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed i…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Critical 9.3
    CVE-2025-13294

    Unauthenticated SQL Injection

    An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remo…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Critical 9.3
    CVE-2025-13293

    Backdoor / default root credentials

    A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored …

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)