Vulnerability Description
TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the web server through a segmentation fault. In addition, multiple action endpoints process attacker-controlled parameters using unsafe string operations such as sprintf() and strcat() without adequate bounds checking, allowing crafted input to trigger buffer overflows and crash the web server. The affected endpoints include onRestart, onReset, ClearData, uploadInvFile, getIndiaRPData, YearCaparity, TotalfaultData, recordData, InvHistoryData, CollectHistoryData, InvFaultData, GetPortTableByParm, and UpdatePortConfig.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2025-15683?
CVE-2025-15683 is a documented vulnerability. TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or ...
How severe is CVE-2025-15683?
CVSS scoring is not yet available for CVE-2025-15683. Check NVD for updates.
Is there a patch for CVE-2025-15683?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.