CVE-2025-15682highCWE-770

CVE-2025-15682: falha de alta gravidade em TBEA TLogger (TBEA Communication Box 3rd…

Unauthenticated Resource Exhaustion

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TBEA TLogger

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.5%
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/ endpoint, causing the web server to create persistent files containing attacker-controlled data under /opt/myapp/webserver/. The generated files are not removed because the web server attempts to move them into a non-existent directory. Repeated requests can therefore exhaust available storage and cause a denial-of-service condition.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TBEA · TBEA TLogger (TBEA Communication Box 3rd Generation)
CVEs relacionadas — TBEA TLogger (TBEA Communication Box 3rd…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-15681CRITICALInsufficient Webserver AuthenticationEPSS 0.7%CVE-2025-15683HIGHMultiple Unauthenticated Denial-of-Service ConditionsEPSS 0.6%CVE-2025-13294CRITICALUnauthenticated SQL InjectionEPSS 0.6%CVE-2025-13293CRITICALBackdoor / default root credentialsEPSS 0.5%CVE-2025-15680LOWInformation Disclosure via UARTEPSS 0.2%