CVE-2025-13294
Unauthenticated SQL Injection
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploit these endpoints to read, modify, or delete data stored in the device's CCU.db database.
| CWE | CWE-89 |
| Vendor | tbea |
| Product | tbea tlogger (tbea communication box 3rd generation) |
| Published | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for tbea tbea tlogger (tbea communication box 3rd generation)
Be the first to know when new unknown vulnerabilities affecting tbea tbea tlogger (tbea communication box 3rd generation) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TBEA / TBEA TLogger (TBEA Communication Box 3rd Generation)
0 ≤ V2.1.0.0B0.0.0.0
Credits
S. Eisenreich-Dietz (CyberDanube) T. Weber (CyberDanube) F. Koroknai D. Blagojevic