ICSA-26-069-02

icsaUScisa_csaf_ot

Lantronix EDS3000PS and EDS5000 (Update B)

view advisory published 2026-03-10

Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2025-70082US—OT elevated—
The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated…
CVE-2025-67041US—OT elevated—
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to e…
CVE-2025-67039US—OT elevated—
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authori…
CVE-2025-67038US—OT criticalKEV
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concat…
CVE-2025-67037US——
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected comm…
CVE-2025-67036US——
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name pa…
CVE-2025-67035US——
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of inp…
CVE-2025-67034US——
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credentials through the managem…
02

references

External citations — patches, advisories, analysis.

03

remediations (36)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan