Beveiligingsadvies

CVE-2023-7329

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-11-12 22:06:26

Laatst bijgewerkt 2026-04-07 14:08:27

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.

← Alle CVE's bekijken Bekijk op cve.org ↗