Skip to content
OpenAdvisories

Product · tinycontrol

LAN Controller

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    Tinycontrol LAN Controller v3 (LK3) Remote DoS

    Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore fac…