Lantronix

Records62All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical32CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Lantronix records in CISA KEV

TI-2025-41112 Lantronix EDS5000 Code Injection Vulnerability CRITICAL 99KEV 2026-06-23

Components

Products in the NVD configurations · select one to filter the records

Premierwave 2050 Firmware 23 records HIGH Eds5008 Firmware 5 records CRITICAL Eds5016 Firmware 5 records CRITICAL Eds5032 Firmware 5 records CRITICAL Eds3008ps1ns Firmware 3 records MEDIUM Eds3016ps1ns Firmware 3 records MEDIUM Xport Edge Firmware 3 records LOW Xprintserver 2 records MEDIUM

Records

23 records in Premierwave 2050 Firmware · all components

TI-2021-04926 CVE-2021-21881 · GHSA-fm7j-3jwj-3cr6

OS command injection in Lantronix

HIGH 69

An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.36935 Published 2021-12-22 No fix listed CWE-78

TI-2021-04937 CVE-2021-21892 · GHSA-wp8f-gcf7-896v

Stack-based buffer overflow in Lantronix

HIGH 66

A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.30436 Published 2021-12-22 No fix listed CWE-121

TI-2021-04928 CVE-2021-21883 · GHSA-p4p4-523m-jgf5

OS command injection in Lantronix

MEDIUM 51

An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78

TI-2021-04917 CVE-2021-21872 · GHSA-v378-ppcw-9mxm

OS command injection in Lantronix

MEDIUM 51

An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78

TI-2021-04934 CVE-2021-21889 · GHSA-xmxf-9v5q-5mfw

Stack-based buffer overflow in Lantronix

MEDIUM 48

A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02938 Published 2021-12-22 No fix listed CWE-121

TI-2021-04929 CVE-2021-21884 · GHSA-w846-6866-qc3g

OS command injection in Lantronix

MEDIUM 47

An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0527 Published 2021-12-22 No fix listed CWE-78

TI-2021-04927 CVE-2021-21882 · GHSA-rw95-9x23-cwq8

OS command injection in Lantronix

MEDIUM 47

An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0606 Published 2021-12-22 No fix listed CWE-78

TI-2021-04933 CVE-2021-21888 · GHSA-79h7-vxcj-crgr

OS command injection in Lantronix

MEDIUM 46

An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03885 Published 2021-12-22 No fix listed CWE-78

TI-2021-04936 CVE-2021-21891 · GHSA-c2pc-v7xf-jj54

Stack-based buffer overflow in Lantronix

MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121

TI-2021-04935 CVE-2021-21890 · GHSA-h67j-5fr3-9g6q

Stack-based buffer overflow in Lantronix

MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121

TI-2021-04932 CVE-2021-21887 · GHSA-mh5r-cxjx-37mf

Stack-based buffer overflow in Lantronix

MEDIUM 45

A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03087 Published 2021-12-22 No fix listed CWE-121

TI-2021-04920 CVE-2021-21875 · GHSA-54gp-52r5-m6x9

OS command injection in Lantronix

MEDIUM 45

A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03011 Published 2021-12-22 No fix listed CWE-78

TI-2021-04919 CVE-2021-21874 · GHSA-g8hx-765h-vxcc

OS command injection in Lantronix

MEDIUM 45

A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03011 Published 2021-12-22 No fix listed CWE-78

TI-2021-04918 CVE-2021-21873 · GHSA-f4q7-rrgp-wx8r

OS command injection in Lantronix

MEDIUM 45

A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.03011 Published 2021-12-22 No fix listed CWE-78

TI-2021-04939 CVE-2021-21894 · GHSA-vfpr-7rxr-wj23

Path traversal in Lantronix

MEDIUM 44

A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02478 Published 2021-12-22 No fix listed CWE-22

TI-2021-04922 CVE-2021-21877 · GHSA-vp3f-gm6v-2mg2

OS command injection in Lantronix

MEDIUM 44

Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02783 Published 2021-12-22 No fix listed CWE-78

TI-2021-04921 CVE-2021-21876 · GHSA-37qv-xjx4-w4h2

OS command injection in Lantronix

MEDIUM 44

Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02783 Published 2021-12-22 No fix listed CWE-78

TI-2021-04940 CVE-2021-21895 · GHSA-pgf6-x544-v9h8

Path traversal in Lantronix

LOW 36

A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02415 Published 2021-12-22 No fix listed CWE-22

TI-2021-04930 CVE-2021-21885 · GHSA-ggw5-q8qf-pfgf

Path traversal in Lantronix

LOW 36

A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02464 Published 2021-12-22 No fix listed CWE-22

TI-2021-04925 CVE-2021-21880 · GHSA-qx9v-77xx-r5wj

Path traversal in Lantronix

LOW 36

A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02464 Published 2021-12-22 No fix listed CWE-22

TI-2021-04941 CVE-2021-21896 · GHSA-wqmj-6g5m-vv5w

Path traversal in Lantronix

LOW 33

A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.02228 Published 2021-12-22 No fix listed CWE-22

TI-2021-04923 CVE-2021-21878 · GHSA-6fw5-96cf-75p5

Exposure of resource to wrong sphere in Lantronix

LOW 25

A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01243 Published 2021-12-22 No fix listed CWE-668

TI-2021-04931 CVE-2021-21886 · GHSA-73jg-9gc6-fg9c

Path traversal in Lantronix

LOW 24

A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8.9.0.0R4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01938 Published 2021-12-22 No fix listed CWE-22

Open these records in search →