CVE-2025-15683

Received Received - Intake

Unauthenticated DoS in TBEA TLogger V2.1.0.0

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: CyberDanube

Description

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the web server through a segmentation fault. In addition, multiple action endpoints process attacker-controlled parameters using unsafe string operations such as sprintf() and strcat() without adequate bounds checking, allowing crafted input to trigger buffer overflows and crash the web server. The affected endpoints include onRestart, onReset, ClearData, uploadInvFile, getIndiaRPData, YearCaparity, TotalfaultData, recordData, InvHistoryData, CollectHistoryData, InvFaultData, GetPortTableByParm, and UpdatePortConfig.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2025-15683

EUVD

EUVD-2025-210671

Affected Vendors & Products

Vendor	Product	Version / Range
tbea	tlogger	2.1.0.0b0.0.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

TBEA TLogger V2.1.0.0B0.0.0.0 has multiple unauthenticated denial-of-service vulnerabilities in its web server. An attacker can remotely reboot or reset the device, clear application data, or crash the web server by exploiting unsafe string operations like sprintf() and strcat() in specific HTTP endpoints. These endpoints include onRestart, onReset, ClearData, uploadInvFile, and others.

Detection Guidance

Detect this vulnerability by scanning for open HTTP endpoints on TBEA TLogger devices. Check for exposed endpoints like /onRestart, /onReset, /ClearData, or /uploadInvFile. Use network scanners like nmap to identify devices with open ports 80 or 443. Inspect web server logs for unusual requests to these endpoints.

Impact Analysis

This vulnerability allows an unauthenticated remote attacker to disrupt device operations by crashing the web server or causing system resets. This could lead to loss of device functionality, data corruption, or prolonged downtime for critical systems relying on TLogger.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling unauthenticated denial-of-service attacks that disrupt device availability. Buffer overflows and crashes may lead to data processing interruptions, potentially violating availability requirements under these regulations.

Mitigation Strategies

Immediately isolate affected devices from the network. Disable or block access to the vulnerable HTTP endpoints via firewall rules. Update the device firmware if a patch is available. Monitor network traffic for suspicious activity targeting these endpoints.

Hi! I’m here to help you understand CVE-2025-15683. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70