Skip to content
OpenAdvisories

Product · tinycontrol

LK4

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-11500

    Credentials exposure in tinycontrol devices

    Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management and one for protecting all other server resources. When the latter is turned off (which is a default s…

    tinycontrol LK3.9 tcPDU Lan Kontroler v3.5
  • High 8.6
    CVE-2025-15587

    Credentials exposure in tinycontrol devices

    Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessing a specific resource inaccessible via a graphical interface. This issue has been fixed in firmware …

    tinycontrol LK3.9 tcPDU Lan Kontroler v3.5