Filtered by vendor Cisco Subscriptions
Filtered by product Wireless Lan Controller Software Firmware Subscriptions

Search

Switch to Advanced Search (Beta)
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-7329 2 Cisco, Tinycontrol 2 Wireless Lan Controller Software Firmware, Lan Controller 2026-03-05 N/A
Tinycontrol LAN Controller v3 (LK3) firmware versions up to 1.58a (hardware v3.8) contain a missing authentication vulnerability in the stm.cgi endpoint. A remote, unauthenticated attacker can send crafted requests to forcibly reboot the device or restore factory settings, leading to a denial of service and configuration loss.
CVE-2023-54327 2 Cisco, Tinycontrol 3 Wireless Lan Controller Software Firmware, Lan Controller, Lan Controller Firmware 2026-03-05 9.8 Critical
Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request. Attackers can exploit the /stm.cgi endpoint with a specially crafted authentication parameter to disable access controls and modify administrative credentials.