Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

62 records

Vendor: Lantronix Clear all filters
TI-2026-74312 CVE-2026-109439

Lantronix XPress-DR accepts unauthenticated configuration writes

Priority MEDIUM 49

Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00618 Published 2026-10-14 No fix listed CWE-306
TI-2026-58014 CVE-2026-84409 · GHSA-32j5-669h-cw7p

Lantronix G520 Series Cellular Gateway Cross-site Scripting

Priority LOW 36

The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use.

CVSS 4.0HIGH 7.7 Network No auth User interaction EPSS 0.00416 Published 2026-09-29 No fix listed CWE-79
TI-2026-55404 CVE-2026-80156 · GHSA-hmch-26g2-q5qx

Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass

Priority MEDIUM 44

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a path traversal vulnerability in the we…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00697 Published 2026-09-22 Fixed in 9.7.0.5, 9.7.0.1 +1 CWE-22
TI-2026-55403 CVE-2026-80155 · GHSA-h7c7-c453-99x2

Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation

Priority MEDIUM 51

Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain an authentication bypass vulnerability i…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01025 Published 2026-09-22 Fixed in 9.7.0.5, 9.7.0.1 +1 CWE-22
TI-2026-55402 CVE-2026-80154 · GHSA-c7q9-4pfw-ph5m

Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass

Priority MEDIUM 41

All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web management portal that allows unauthenticated attackers to der…

CVSS 4.0HIGH 8.9 Network No auth User interaction EPSS 0.00627 Published 2026-09-22 No fix listed CWE-330
TI-2026-55401 CVE-2026-80152 · GHSA-r3rx-9f4x-5rmw

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55400 CVE-2026-80151 · GHSA-h8x4-hr84-5rp5

Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

Priority MEDIUM 46

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that a…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01658 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-78
TI-2026-55399 CVE-2026-80150 · GHSA-crpp-5w4c-qv65

Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55398 CVE-2026-80149 · GHSA-rpxf-vw4h-fp98

Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55397 CVE-2026-80148 · GHSA-6rw9-fmc4-f3gq

Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation

Priority MEDIUM 40

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSS…

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.0058 Published 2026-09-22 Fixed in 9.7.0.3, 9.7.0.1 +1 CWE-918
TI-2026-55396 CVE-2026-80147 · GHSA-gqp9-cvw4-f6q4

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write

Priority MEDIUM 43

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authentica…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00463 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-121
TI-2026-55395 CVE-2026-80146 · GHSA-88xg-5qpc-c627

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

Priority MEDIUM 44

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authentica…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00848 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-121
TI-2026-55394 CVE-2026-80145 · GHSA-6665-q8xg-hw4c

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.01859 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55393 CVE-2026-80144 · GHSA-ggr5-38c6-hmch

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2026-55392 CVE-2026-80143 · GHSA-8m6g-v32x-vpvf

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

Priority MEDIUM 46

Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attack…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01693 Published 2026-09-22 Fixed in 9.7.0.2, 9.7.0.1 CWE-78
TI-2025-43021 CVE-2025-70082 · GHSA-pc68-63w9-jjcc

Lantronix EDS3000PS Unverified Password Change

Priority LOW 32

The administrator password can be changed without knowledge of the current password.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00537 Published 2026-03-11 Fixed in 3.2.0.0R2 CWE-620
TI-2025-41114 CVE-2025-67041 · GHSA-x7x6-qwq2-55xh

Lantronix EDS3000PS OS Command Injection

Priority MEDIUM 46

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00488 Published 2026-03-11 Fixed in 3.2.0.0R2 CWE-78
TI-2025-41109 CVE-2025-67035 · GHSA-rxgf-4wqv-5r9g

Lantronix EDS5000 OS Command Injection

Priority MEDIUM 46

An issue was discovered in Lantronix EDS5000 2.1.0.0R3.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00485 Published 2026-03-11 Fixed in 2.2.0.0R1 CWE-78
TI-2025-07091 CVE-2025-7766 · GHSA-4j9m-f26m-gcf5

Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

Priority MEDIUM 43

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installe…

CVSS 4.0HIGH 8.6 Adjacent network No auth User interaction EPSS 0.0205 Published 2025-07-22 No fix listed CWE-611
Load more