Read the docs

TBEA

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TBEA records in CISA KEV

No TBEA vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-12157 CVE-2025-13293 · GHSA-8hj2-2q8g-jqhw

Backdoor / default root credentials

Priority MEDIUM 49

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0051 Published 2026-08-10 No fix listed CWE-798
Priority MEDIUM 47

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00552 Published 2026-08-10 No fix listed CWE-121
TI-2025-14299 CVE-2025-15682 · GHSA-3xp4-p2g8-p4gx

Unauthenticated Resource Exhaustion

Priority MEDIUM 44

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-10 No fix listed CWE-770
TI-2025-14298 CVE-2025-15681 · GHSA-m738-f6gp-rv3j

Insufficient Webserver Authentication

Priority MEDIUM 43

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00676 Published 2026-08-10 No fix listed CWE-306
Priority MEDIUM 43

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00551 Published 2026-08-10 No fix listed CWE-89
TI-2025-14297 CVE-2025-15680 · GHSA-f723-8mf9-84xv

Information Disclosure via UART

Priority LOW 12

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00206 Published 2026-08-10 No fix listed CWE-497
Open these records in search →