Vendors / tinycontrol Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now tinycontrol records in CISA KEV No tinycontrol vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
Tinycontrol LAN Controller 1.58a contains an authentication bypass vulnerability that allows unauthenticated attackers to change admin passwords through a crafted API request.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00698 · Published 2025-12-30 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
Critical2 High3 Medium0 Low0 No CVSS0