Read the docs

Lantronix

Records62All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical32CVSS 9.0–10.0
CVSS high19CVSS 7.0–8.9

Exploited now

Lantronix records in CISA KEV
TI-2025-41112 Lantronix EDS5000 Code Injection Vulnerability Priority CRITICAL 99KEV 2026-06-23

Components

Products in the NVD configurations · select one to filter the records
Premierwave 2050 Firmware 23 records HIGH Eds5008 Firmware 5 records CRITICAL Eds5016 Firmware 5 records CRITICAL Eds5032 Firmware 5 records CRITICAL Eds3008ps1ns Firmware 3 records MEDIUM Eds3016ps1ns Firmware 3 records MEDIUM Xport Edge Firmware 3 records LOW Xprintserver 2 records MEDIUM

Records

62 records

TI-2021-04926 CVE-2021-21881 · GHSA-fm7j-3jwj-3cr6

OS command injection in Lantronix

Priority HIGH 69

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.36935 Published 2021-12-22 No fix listed CWE-78
TI-2021-04937 CVE-2021-21892 · GHSA-wp8f-gcf7-896v

Stack-based buffer overflow in Lantronix

Priority HIGH 66

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.30436 Published 2021-12-22 No fix listed CWE-121
TI-2026-55403 CVE-2026-80155 · GHSA-h7c7-c453-99x2

Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

Priority MEDIUM 51

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability i…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01025 Published 2026-09-22 Fixed in 9.7.0.5, 9.7.0.1 +1 CWE-22
TI-2021-04928 CVE-2021-21883 · GHSA-p4p4-523m-jgf5

OS command injection in Lantronix

Priority MEDIUM 51

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78
TI-2021-04917 CVE-2021-21872 · GHSA-v378-ppcw-9mxm

OS command injection in Lantronix

Priority MEDIUM 51

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78
TI-2026-74312 CVE-2026-109439

Lantronix XPress-DR accepts unauthenticated configuration writes

Priority MEDIUM 49

Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00618 Published 2026-10-14 No fix listed CWE-306
TI-2025-02236 CVE-2025-2567 · GHSA-9jvh-qg32-87qg

Lantronix Xport Missing Authentication for Critical Function

Priority MEDIUM 49

An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00507 Published 2025-04-15 No fix listed CWE-306
TI-2021-04934 CVE-2021-21889 · GHSA-xmxf-9v5q-5mfw

Stack-based buffer overflow in Lantronix

Priority MEDIUM 48

A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02938 Published 2021-12-22 No fix listed CWE-121
TI-2021-04929 CVE-2021-21884 · GHSA-w846-6866-qc3g

OS command injection in Lantronix

Priority MEDIUM 47

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0527 Published 2021-12-22 No fix listed CWE-78
TI-2021-04927 CVE-2021-21882 · GHSA-rw95-9x23-cwq8

OS command injection in Lantronix

Priority MEDIUM 47

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78
TI-2026-55401 CVE-2026-80152 · GHSA-r3rx-9f4x-5rmw

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55400 CVE-2026-80151 · GHSA-h8x4-hr84-5rp5

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55394 CVE-2026-80145 · GHSA-6665-q8xg-hw4c

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01859 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55393 CVE-2026-80144 · GHSA-ggr5-38c6-hmch

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55392 CVE-2026-80143 · GHSA-8m6g-v32x-vpvf

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2025-41114 CVE-2025-67041 · GHSA-x7x6-qwq2-55xh

Lantronix EDS3000PS OS Command Injection

Priority MEDIUM 46

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00488 Published 2026-03-11 Fixed in 3.2.0.0R2 CWE-78
TI-2025-41109 CVE-2025-67035 · GHSA-rxgf-4wqv-5r9g

Lantronix EDS5000 OS Command Injection

Priority MEDIUM 46

An issue was discovered in Lantronix EDS5000 2.1.0.0R3.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00485 Published 2026-03-11 Fixed in 2.2.0.0R1 CWE-78
TI-2021-04933 CVE-2021-21888 · GHSA-79h7-vxcj-crgr

OS command injection in Lantronix

Priority MEDIUM 46

An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03885 Published 2021-12-22 No fix listed CWE-78
TI-2021-04936 CVE-2021-21891 · GHSA-c2pc-v7xf-jj54

Stack-based buffer overflow in Lantronix

Priority MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121
TI-2021-04935 CVE-2021-21890 · GHSA-h67j-5fr3-9g6q

Stack-based buffer overflow in Lantronix

Priority MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121
TI-2021-04932 CVE-2021-21887 · GHSA-mh5r-cxjx-37mf

Stack-based buffer overflow in Lantronix

Priority MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121
Load more
Open these records in search →