CVE Intelligence

Tinycontrol Lan Controller Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Tinycontrol Lan Controller Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:tinycontrol:lan_controller_firmware

CVE-2023-54327 Critical · 9.8 CWE-862 Dec 30, 2025
Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change
Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.