CVE-2023-7329 — Tinycontrol LAN Controller v3 (LK3) Remote DoS
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticat…
Published: 2025-11-12 · CVSS: 8.7 · CVSS 4.0
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7