CVE-2025-15680

Information Disclosure via UART

State: Published
Severity: 2.4 Low
Published: Aug 10, 2026
Updated: Aug 12, 2026
Reserved: Aug 4, 2026

Description

TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interface and observe the device boot process and runtime debug output. The disclosed information includes operating system details, software versions, network configuration, filesystem paths, and other implementation and debugging information that may assist an attacker in further compromising the device.

Scores

CVSS	Score	Vector	Source
4.0	2.4 Low	CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N	CyberDanube

Weaknesses

CWE-497

Affected Products

Product	Versions
TBEA TLogger (TBEA Communication Box 3rd Generation)TBEA	V2.1.0.0B0.0.0.0 and earlierAffected

References

https://en.tbea.com/about.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.