office@cyberdanube.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS office@cyberdanube.com
03
assessed vulnerabilities (61)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-15683US | —OT elevated | — | ||
TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP end… | ||||
| CVE-2025-15682US | — | — | ||
TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/… | ||||
| CVE-2025-15681US | —OT elevated | — | ||
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly… | ||||
| CVE-2025-15680US | — | — | ||
TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection. A physically proximate attacker can connect to the UART interfac… | ||||
| CVE-2025-13294US | — | — | ||
An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directl… | ||||
| CVE-2025-13293US | —OT elevated | — | ||
A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed… | ||||
| CVE-2026-65313US | —OT elevated | — | ||
A provisioning script used when installing HIPASE-250 (formerly 250
SCALA) engineering workstations sets a fixed, hard-coded x11vnc
password. Because the same credential is applied… | ||||
| CVE-2026-65311US | —OT elevated | — | ||
The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA)
in affected versions exposes an undocumented endpoint that changes
the server's logging level and target withou… | ||||
| CVE-2026-65310US | —OT elevated | — | ||
ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration
of affected versions, exposes its data and configuration endpoint
without any authentication and permissive CO… | ||||
| CVE-2026-65309US | —OT elevated | — | ||
ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores
and transmits user passwords using a reversible format instead of a
one-way password hash. This allows an attack… | ||||
| CVE-2026-8989US | medium6.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins. An attacker with physical acc… | ||||
| CVE-2026-8988US | medium6.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader. An attac… | ||||
| CVE-2026-8987US | high8.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint. An authenticated attacker c… | ||||
| CVE-2026-8986US | critical9.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests. A malicious or compromised OCPP server can s… | ||||
| CVE-2026-8985US | critical9.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002. An unauthenticated attacker can supply cra… | ||||
| CVE-2026-8984US | critical9.8 | — | ||
Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002. A crafted request to the /test endpoint… | ||||
| CVE-2026-8983US | critical9.8OT elevated | — | ||
Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An attacker can… | ||||
| CVE-2026-8982US | high8.1OT elevated | — | ||
Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on device-sp… | ||||
| CVE-2026-8980US | — | — | ||
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation. An authenticated low-privileged user can change the passwords of the admin (operator)… | ||||
| CVE-2026-8979US | — | — | ||
The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass. An unauthenticated remote attacker can change the password of the user account vi… | ||||