High severityNVD Advisory· Published Nov 12, 2025· Updated Apr 15, 2026
CVE-2023-7329
CVE-2023-7329
Description
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- exchange.xforce.ibmcloud.com/vulnerabilities/275810nvd
- packetstormsecurity.com/files/174455/nvd
- tinycontrol.pl/en/archives/lan-controller-35/nvd
- www.exploit-db.com/exploits/51730nvd
- www.vulncheck.com/advisories/tinycontrol-lan-controller-v3-remote-dosnvd
- www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5785.phpnvd
News mentions
0No linked articles in our index yet.