CVE-2025-13293criticalCWE-798

CVE-2025-13293: falha crítica em TBEA TLogger (TBEA Communication Box 3rd…

Backdoor / default root credentials

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TBEA TLogger

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.5%
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticate to the SSH service. Successful exploitation provides full administrative control of the affected device.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TBEA · TBEA TLogger (TBEA Communication Box 3rd Generation)
CVEs relacionadas — TBEA TLogger (TBEA Communication Box 3rd…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-15681CRITICALInsufficient Webserver AuthenticationEPSS 0.7%CVE-2025-15683HIGHMultiple Unauthenticated Denial-of-Service ConditionsEPSS 0.6%CVE-2025-13294CRITICALUnauthenticated SQL InjectionEPSS 0.6%CVE-2025-15682HIGHUnauthenticated Resource ExhaustionEPSS 0.5%CVE-2025-15680LOWInformation Disclosure via UARTEPSS 0.2%