CVE-2025-15681

TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the attacker to access functionality intended for authenticated users and may expose or modify device configuration and data. Logging out from the bypassed state can additionally cause the web server to crash.

CVSS

No CVSS.

References

Link	Resource
https://en.tbea.com/about.html

Configurations

No configuration.

History

29 Sep 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) TBEA TLogger V2.1.0.0B0.0.0.0 contiene una omisión de autenticación en su servidor web. Después de que un usuario se haya autenticado previamente en el dispositivo, un atacante no autenticado puede acceder directamente a la funcionalidad protegida a través del endpoint /index.asp sin proporcionar credenciales válidas. Esto permite al atacante acceder a la funcionalidad destinada a usuarios autenticados y puede exponer o modificar la configuración y los datos del dispositivo. Cerrar sesión desde el estado omitido puede causar adicionalmente que el servidor web se bloquee.

Information

Published : 2026-08-10 20:17

Updated : 2026-09-29 11:10

NVD link : CVE-2025-15681

Mitre link : CVE-2025-15681

CVE.ORG link : CVE-2025-15681

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-15681", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15681", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-12T18:10:51.494985Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "office@cyberdanube.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.2, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "office@cyberdanube.com", "affectedData": [{"vendor": "TBEA", "product": "TBEA TLogger (TBEA Communication Box 3rd Generation)", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "V2.1.0.0B0.0.0.0"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-10T20:17:25.157", "references": [{"url": "https://en.tbea.com/about.html", "source": "office@cyberdanube.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "office@cyberdanube.com", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the attacker to access functionality intended for authenticated users and may expose or modify device configuration and data. Logging out from the bypassed state can additionally cause the web server to crash."}, {"lang": "es", "value": "TBEA TLogger V2.1.0.0B0.0.0.0 contiene una omisi\u00f3n de autenticaci\u00f3n en su servidor web. Despu\u00e9s de que un usuario se haya autenticado previamente en el dispositivo, un atacante no autenticado puede acceder directamente a la funcionalidad protegida a trav\u00e9s del endpoint /index.asp sin proporcionar credenciales v\u00e1lidas. Esto permite al atacante acceder a la funcionalidad destinada a usuarios autenticados y puede exponer o modificar la configuraci\u00f3n y los datos del dispositivo. Cerrar sesi\u00f3n desde el estado omitido puede causar adicionalmente que el servidor web se bloquee."}], "lastModified": "2026-09-29T11:10:00.150", "sourceIdentifier": "office@cyberdanube.com"}