Tycon Systems vulnerabilities
We track 3 vulnerabilities in Tycon Systems products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 4, 2026.
Latest Tycon Systems vulnerabilities
- 8.1 High severity
TPDIN-Monitor-WEB3: Missing Authorization
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a Missing Authorization vulnerability. This could allow an attacker to extract system credentials, configurations, or flash contents.
- 8.8 High severity
TPDIN-Monitor-WEB3: Cross-Site Request Forgery
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. This could allow an attacker to perform state changing operations on the device.
- 9.8 Critical severity
TPDIN-Monitor-WEB2: Missing Authentication for Critical Functionality
The Tycon Systems TPDIN-Monitor-WEB2 ships without HTTP credentials configured, intended for an installer to set them on first use. On firmware 2.4.4 and earlier, a unit left in this unconfigured state serves the web management interface without requiring any