TBEA TLogger (TBEA Communication Box 3rd Generation) vulnerabilities
5 known vulnerabilities in TBEA TLogger (TBEA Communication Box 3rd Generation) from TBEA. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
TBEA TLogger (TBEA Communication Box 3rd…: Stack-based Buffer Overflow
TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the w
- 8.7 High severity
TBEA TLogger (TBEA Communication Box 3rd…: Allocation of Resources Without Limits or Throttling
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/ endpoint, causing the web server to create persistent files containing attacker
- 9.2 Critical severity
TBEA TLogger (TBEA Communication Box 3rd…: Missing Authentication for Critical Functionality
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providin
- 9.3 Critical severity
TBEA TLogger (TBEA Communication Box 3rd…: Improper Neutralization of Special Elements used in an SQL Command
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remot
- 9.3 Critical severity
TBEA TLogger (TBEA Communication Box 3rd…: Use of Hard-coded Credentials
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored i