Lantronix

Records62All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical32CVSS 9.0–10.0

CVSS high19CVSS 7.0–8.9

Exploited now

Lantronix records in CISA KEV

TI-2025-41112 Lantronix EDS5000 Code Injection Vulnerability CRITICAL 99KEV 2026-06-23

Components

Products in the NVD configurations · select one to filter the records

Premierwave 2050 Firmware 23 records HIGH Eds5008 Firmware 5 records CRITICAL Eds5016 Firmware 5 records CRITICAL Eds5032 Firmware 5 records CRITICAL Eds3008ps1ns Firmware 3 records MEDIUM Eds3016ps1ns Firmware 3 records MEDIUM Xport Edge Firmware 3 records LOW Xprintserver 2 records MEDIUM

Records

3 records in Xport Edge Firmware · all components

TI-2023-06621 CVE-2023-7237 · GHSA-3gg4-v4m9-rj55

Lantronix XPort Weak Encoding for Password

LOW 35

Lantronix XPort sends weakly encoded credentials within web request headers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00305 Published 2024-01-23 No fix listed CWE-261

TI-2020-10607 CVE-2020-13528 · GHSA-x5c7-xvvf-6r97

Cleartext transmission of sensitive information in Lantronix

LOW 29

An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7.

CVSS 3.1MEDIUM 5.3 Network No auth User interaction EPSS 0.02969 Published 2020-12-17 No fix listed CWE-319

TI-2020-10606 CVE-2020-13527 · GHSA-f34x-833g-jcxv

Cross-site request forgery in Lantronix

LOW 22

An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00596 Published 2020-12-17 No fix listed CWE-352

Open these records in search →