CVE-2023-53739
Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.
| CWE | CWE-260 |
| Vendor | tinycontrol |
| Product | tinycontrol lan controller v |
| Published | Dec 9, 2025 |
| Last Updated | Apr 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for tinycontrol tinycontrol lan controller v
Be the first to know when new unknown vulnerabilities affecting tinycontrol tinycontrol lan controller v are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Tinycontrol / Tinycontrol LAN Controller v
<=1.58a HW 3.8
Tinycontrol / LK
<=1.58a HW 3.8
References
exploit-db.com: https://www.exploit-db.com/exploits/51731 tinycontrol.pl: https://www.tinycontrol.pl zeroscience.mk: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5786.php vulncheck.com: https://www.vulncheck.com/advisories/tinycontrol-lan-controller-v3-lk3-unauthenticated-configuration-backup-disclosure
Credits
LiquidWorm as Gjoko Krstic of Zero Science Lab