cbcvebase.

Lantronix E210 Series vulnerabilities

1 known vulnerability affecting lantronix/e210_series.

Total CVEs
1
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-67038P1CRITICALCVSS 9.8KEVfixed in 3.21.0.0R12026-03-11
CVE-2025-67038 [CRITICAL] CWE-78 CVE-2025-67038: An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with ro
nvd
Lantronix E210 Series vulnerabilities | cvebase