Tinycontrol

5 CVEs across 9 Tinycontrol products. Browse Tinycontrol vulnerabilities, severities, and proof-of-concept exploits.

Tinycontrol products with known CVEs

ProductCVEs
Lan Controller2
Lan Kontroler V3.52
Lk3.92
Lk42
Tcpdu2
Lan Controller1
Lan Controller Firmware1
Lk1
Tinycontrol Lan Controller V1
Tinycontrol CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-155872026-03-16Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 allow a low privileged user to read an administrator's password by directly accessin…
CVE-2025-115002026-03-16Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two separate authentication mechanisms - one solely for interface management an…
CVE-2023-54327Critical9.82025-12-30Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a craf…
CVE-2023-537392025-12-09Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files c…
CVE-2023-73292025-11-12Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A rem…