Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2025-67041

Lantronix EDS3000PS OS Command Injection

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Lantronix
Products
Eds3000ps Eds3008ps1ns Eds3008ps1ns Firmware and 2 more
CVE-2025-70082

Lantronix EDS3000PS Unverified Password Change

The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Lantronix
Products
Eds3000ps Eds3008ps1ns Eds3008ps1ns Firmware and 2 more
CVE-2025-67039

Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Lantronix
Products
Eds3000ps Eds3008ps1ns Eds3008ps1ns Firmware and 2 more