Skip to content
OpenAdvisories

Vendor

tinycontrol

5 known vulnerabilities.

Products

Lan Kontroler v3.5 2 LK3.9 2 LK4 2 tcPDU 2 LAN Controller 2 Tinycontrol LAN Controller v 1 LK 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.7
    CVE-2025-11500

    Credentials exposure in tinycontrol devices

    Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off (which is a default s…

    tinycontrol LK3.9 tcPDU Lan Kontroler v3.5
  • High 8.6
    CVE-2025-15587

    Credentials exposure in tinycontrol devices

    Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resource inaccessible via a graphical interface. This issue has been fixed in firmware …

    tinycontrol LK3.9 tcPDU Lan Kontroler v3.5
  • High 8.7
    CVE-2023-7329

    Tinycontrol LAN Controller v3 (LK3) Remote DoS

    Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore fac…

    tinycontrol LAN Controller