Vulnerabilities

TI-2025-14300 CVE-2025-15683 · GHSA-h63r-9fqg-pvq9

Multiple Unauthenticated Denial-of-Service Conditions

MEDIUM 47

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00552 Published 2026-08-10 No fix listed CWE-121

TI-2025-14299 CVE-2025-15682 · GHSA-3xp4-p2g8-p4gx

Unauthenticated Resource Exhaustion

MEDIUM 44

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00544 Published 2026-08-10 No fix listed CWE-770

TI-2025-14298 CVE-2025-15681 · GHSA-m738-f6gp-rv3j

Insufficient Webserver Authentication

MEDIUM 43

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00676 Published 2026-08-10 No fix listed CWE-306

TI-2025-14297 CVE-2025-15680 · GHSA-f723-8mf9-84xv

Information Disclosure via UART

LOW 12

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection.

CVSS 4.0LOW 2.4 Physical No auth No interaction EPSS 0.00206 Published 2026-08-10 No fix listed CWE-497

TI-2025-12158 CVE-2025-13294 · GHSA-w4wx-fgc2-5x27

Unauthenticated SQL injection in TBEA TLogger

MEDIUM 43

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00551 Published 2026-08-10 No fix listed CWE-89

TI-2025-12157 CVE-2025-13293 · GHSA-8hj2-2q8g-jqhw

Backdoor / default root credentials

MEDIUM 49

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0051 Published 2026-08-10 No fix listed CWE-798