CVE Intelligence

Vulnerabilidades do Tinycontrol Lan Controller Firmware

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Tinycontrol Lan Controller Firmware: 1 registro(s), com versões afetadas e correções.
cpe:2.3:o:tinycontrol:lan_controller_firmware

CVE-2023-54327 Crítica · 9.8 CWE-862 30/12/2025
Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change
Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.