CVE-2025-13293
Received Received - Intake

Hard-Coded Root Credentials in TBEA TLogger

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: CyberDanube

Description
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticate to the SSH service. Successful exploitation provides full administrative control of the affected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-11
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2025-13293
EUVD
EUVD-2025-210666

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
cyberdanube tbea_tlogger 2.1.0.0b0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-798 The product contains hard-coded credentials, such as a password or cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0. An unauthenticated remote attacker can exploit this by accessing the exposed SSH service. The root password can be recovered from the password hash in /etc/shadow, allowing full administrative control of the device.

Detection Guidance

Check if the device is running TBEA TLogger V2.1.0.0B0.0.0.0 by inspecting system information. Verify if SSH is enabled and accessible on the device. Examine /etc/shadow for a password hash that can be cracked to recover the root password.

Impact Analysis

An attacker could gain root-level access to the device, leading to complete control over its functions. This may result in data theft, unauthorized modifications, or disruption of device operations. The impact includes potential loss of confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements such as GDPR (data protection) and HIPAA (health information security). Organizations may face legal penalties, reputational damage, and loss of trust due to non-compliance.

Mitigation Strategies

Disable SSH access to the device if not required. Change the root password to a strong, unique value. Update the device firmware to a patched version if available. Restrict network access to the device to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-13293. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart