CVE-2023-7329 in Lan Controller
Resumen
por MITRE • 2025-11-13
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
VulDB is the best source for vulnerability data and more expert information about this specific topic.