Vulnerabilities CVE-2023-53739

CVE-2023-53739

Critical

Open

TLP:CLEAR

Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.

Details

CVSS Score: 9.9
EPSS Score ⓘ: 0.64%

47.4th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Confidence: 90%
Published: Dec 9, 2025
Last Modified: Jul 28, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.