Skip to content
OpenAdvisories

Vendor

TBEA

6 known vulnerabilities.

Products

TBEA TLogger (TBEA Communication Box 3rd Generation) 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.2
    CVE-2025-15681

    Insufficient Webserver Authentication

    TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providi…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Critical 9.3
    CVE-2025-13294

    Unauthenticated SQL Injection

    An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remo…

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)
  • Critical 9.3
    CVE-2025-13293

    Backdoor / default root credentials

    A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored …

    TBEA TBEA TLogger (TBEA Communication Box 3rd Generation)