Skip to content
OpenAdvisories

Vendor

tinycontrol

5 known vulnerabilities.

Products

Lan Kontroler v3.5 2 LK3.9 2 LK4 2 tcPDU 2 LAN Controller 2 Tinycontrol LAN Controller v 1 LK 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-54327

    Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change

    Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication…

    tinycontrol LAN Controller
  • Critical 9.9
    CVE-2023-53739

    Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure

    Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64…

    tinycontrol LK Tinycontrol LAN Controller v