Tinycontrol LAN Controller Authentication Bypass Vulnerability Allowing Unauthenticated Password Changes

An authentication bypass vulnerability has been identified in Tinycontrol LAN Controller version 1.58a on hardware version 3.8. This vulnerability allows unauthenticated attackers to change admin passwords by sending a crafted API request to the /stm.cgi endpoint. The exploitation involves manipulating the authentication parameter to disable access controls, thereby gaining unauthorized access to the administrative panel.

Impact

Exploitation of this vulnerability leads to unauthorized password changes, allowing attackers to gain administrative access on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the /stm.cgi endpoint with a crafted authentication parameter that includes the base64-encoded desired admin password. This request can be made using a tool like curl.