CVE-2025-15680
Received Received - Intake

UART Interface Exposure in TBEA TLogger V2.1.0.0B0.0.0.0

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: CyberDanube

Description
TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system details, software versions, network configuration, filesystem paths, and other implementation and debugging information that may assist an attacker in further compromising the device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-11
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2025-15680
EUVD
EUVD-2025-210668

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
tbea tlogger 2.1.0.0b0.0.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

TBEA TLogger V2.1.0.0B0.0.0.0 has an exposed UART interface on its circuit board without adequate protection. This allows a physically proximate attacker to connect to the interface and view the device's boot process and runtime debug output, revealing sensitive system details.

Detection Guidance

This vulnerability requires physical access to the device's UART interface. Detection involves inspecting the device's circuit board for exposed UART pins. No network-based detection commands are applicable.

Impact Analysis

An attacker could use the exposed debug information to identify software versions, network settings, and filesystem paths. This data may help them plan further attacks to compromise the device or gain unauthorized access.

Compliance Impact

The vulnerability exposes sensitive device information such as operating system details, software versions, network configuration, and filesystem paths. This could potentially violate data protection requirements under GDPR and HIPAA by exposing confidential or personal data during debugging or boot processes.

Mitigation Strategies

Physically secure the device to prevent unauthorized access to the circuit board. Cover or seal the UART interface if not needed for maintenance. Disable debug output if possible through device configuration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-15680. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart