Approved changes feed: RSS · Atom

cpe:2.3:h:tinycontrol:lan_controller:3.8:*:*:*:*:*:*:*

part: h version: 3.8 update: *

VendorTinycontrol (3bcd959c-82a6-56ee-b507-90b9f17ebd67)
ProductLan Controller (8d1c5463-4190-53cc-ae83-5d0a1fa50e4e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-54327 not_vulnerable 2026-06-08 06:19:40.528375 Tinycontrol LAN Controller 1.58a Authentication Bypass via Admin Password Change
CRITICAL (9.8)
Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.
Published: 2025-12-30T22:41:43.728Z
Updated: 2026-05-14T02:07:05.311Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.