VULNERABILITY INTELLIGENCE
CVE-2023-53739
EPSS probability0.63%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-06-17
Description
Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.
Weakness classification
- disclosure@vulncheck.com: CWE-260