Security Advisory
CVE-2023-7329
N/A
UNKNOWN
Vulnerability Description
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
Published Date
November 12, 2025
Official Source
NIST NVD Advisory