CVE-2025-70082

lowpriority · track · 0OT risk · elevatedEPSS 0.005 · 41 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.48% (41st) EPSS

CVSS 2.7 · low

Is it mine?

4 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-27

The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

FixedEDS3000PS seriescisa_csaf_ot
EDS3000PS series: Upgrade to version 3.2.0.0R2 or later. The patch can be found here: https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1349189633/Latest+Firmware+for+the+EDS3000PS+series. (CVE-2025-67039, CVE-2025-70082, CVE-2025-67041)
https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/1349189633/Latest+Firmware+for+the+EDS3000PS+series
MitigationEDS3000PS seriescisa_csaf_ot
Lantronix has released the following updates addressing these vulnerabilities. For more information, see the Lantronix Vulnerability Library (https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw).
https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–critical · 1.2–9.8

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · CISA US

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 5.9

v3.12.7lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:Nsecondary · ics-cert@hq.dhs.gov USexploitability 1.2 · impact 1.4

v4.05.1mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · ics-cert@hq.dhs.gov US

v4.01.2lowCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-620USprimaryCWE-288USCWE-620USCWE-78US

affected products (4)

Products and version ranges known to be affected.

Lantronix EDS3000PS series≤ 3.1.0.0R2cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
lantronix eds3008ps1ns firmware= 3.1.0.0r2nvdUScpe:2.3:o:lantronix:eds3008ps1ns_firmware:*:*:*:*:*:*:*:*
lantronix eds3016ps1ns firmware= 3.1.0.0r2nvdUScpe:2.3:o:lantronix:eds3016ps1ns_firmware:*:*:*:*:*:*:*:*

advisories (1)

Vendor and ecosystem advisories describing this.

ICSA-26-069-02Lantronix EDS3000PS and EDS5000 (Update B)2026-03-10icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code with root-level privileges.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cisa_csaf_ot nvd NVD CVE.org MITRE

published 2026-03-11modified 2026-09-04

related (118)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2020-7378US	critical9.1	2.62% (85th)	Exploit	2020-11-24
CRIXP OpenCRX version 4.30 and 5.0-20200717 and prior suffers from an unverified password change vulnerability. An attacker who is able to connect to the affected OpenCRX instance…
CVE-2006-0684US	high7.5	3.15% (88th)	Exploit	2006-02-15
change_password.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not verify the old password when a user changes the password, which may allow remote attackers…
CVE-2018-7811US	critical9.8	3.50% (89th)	—	2018-11-30
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote…
CVE-2018-7809US	critical9.8	2.47% (84th)	—	2018-11-30
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 which could allow an unauthenticated remote…
CVE-2026-12692US	critical9.8	0.64% (51st)	—	2026-07-17
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 befor…

+113 more

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan