High severityNVD Advisory· Published Nov 12, 2025· Updated Apr 15, 2026
CVE-2023-7329
CVE-2023-7329
Description
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.58a
Patches
Vulnerability mechanics
References
6- exchange.xforce.ibmcloud.com/vulnerabilities/275810nvd
- packetstormsecurity.com/files/174455/nvd
- tinycontrol.pl/en/archives/lan-controller-35/nvd
- www.exploit-db.com/exploits/51730nvd
- www.vulncheck.com/advisories/tinycontrol-lan-controller-v3-remote-dosnvd
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5785.phpnvd
News mentions
0No linked articles in our index yet.