CVE-2025-13293
Backdoor / default root credentials
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticate to the SSH service. Successful exploitation provides full administrative control of the affected device.
| CWE | CWE-798 |
| Vendor | tbea |
| Product | tbea tlogger (tbea communication box 3rd generation) |
| Published | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for tbea tbea tlogger (tbea communication box 3rd generation)
Be the first to know when new unknown vulnerabilities affecting tbea tbea tlogger (tbea communication box 3rd generation) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TBEA / TBEA TLogger (TBEA Communication Box 3rd Generation)
0 ≤ V2.1.0.0B0.0.0.0
Credits
S. Eisenreich-Dietz (CyberDanube) T. Weber (CyberDanube) F. Koroknai D. Blagojevic