Cloudanix VulnDB

CVE-2023-53739

None

CVSS

—

EPSS

0.6%

Published

Dec 9, 2025

CISA due date

—

The record

Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities