CVE-2025-15680 describes a vulnerability in the TBEA TLogger (TBEA Communication Box 3rd Generation) version V2.1.0.0B0.0.0.0 where the UART interface on the device's circuit board is exposed without sufficient protection. An attacker with physical proximity can connect to this interface to monitor the device's boot process and runtime debug output. The information disclosed includes operating system details, software versions, network configuration, filesystem paths, and other debugging information that may facilitate further compromise of the device. The CVSS 4.0 base score is 2.4, indicating low severity. There is no vendor-provided remediation or patch information available, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with physical access to obtain sensitive system and configuration information from the device via the UART interface. While this information disclosure does not directly enable remote compromise, it may assist attackers in planning further attacks or exploitation. The impact is limited by the requirement for physical proximity and the low severity score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or mitigation is provided, restrict physical access to the device to prevent unauthorized connection to the UART interface. No vendor advisory or patch information is currently available.