Skip to content
OpenAdvisories

Product · tinycontrol

LAN Controller

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-54327

    Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change

    Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication…

    tinycontrol LAN Controller