CVE-2025-13293 : 상세 정보

CVE-2025-13293

2026-08-10
20h17 +00:00
A07-Identif. and Authent. Fail
2026-09-29
11h10 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service. The root password can be recovered from the password hash stored in /etc/shadow and used to authenticate to the SSH service. Successful exploitation provides full administrative control of the affected device.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-798 Use of Hard-coded Credentials
The product contains hard-coded credentials, such as a password or cryptographic key.

참고 자료