Tinycontrol LAN Controller 3 Remote Credential Extraction

Posted on 02 September 2023

Tinycontrol LAN Controller version 3 suffers from an issue where an unauthenticated attacker can retrieve the controller's configuration backup file and extract sensitive information that can allow him/her/them to bypass security controls and penetrate the system in its entirety.