What’s Vulnerable › Vulnerabilities

CVE-2025-67034: Lantronix EDS5000, G520, and X300 OS Command Injection

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-11 · updated 2026-09-04
• Weakness: CWE-78

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credentials through the management interface. Injected commands are executed with root privileges.

Affected products

• LANTRONIX Eds5008 Firmware: 2.1.0.0r3
• LANTRONIX Eds5016 Firmware: 2.1.0.0r3
• LANTRONIX Eds5032 Firmware: 2.1.0.0r3

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
• https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw

Get alerted when CVE-2025-67034 or the next vulnerability affects your stack