Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-7329

Tinycontrol LAN Controller v3 (LK3) Remote DoS

Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Cisco Tinycontrol
Products
Wireless Lan Controller Software Firmware Lan Controller
CVE-2023-54327

Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change

Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Cisco Tinycontrol
Products
Wireless Lan Controller Software Firmware Lan Controller Lan Controller Firmware