CVE-2025-67041

HighCVSS 7.2

Published: 11/03/2026(UTC)Updated: 04/09/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

35th percentile - higher than 35% of all known CVEs

Summary

An issue was discovered in Lantronix EDS3000PS version 3.1.0.0R2 where the host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

Risk Assessment

An attacker can remotely execute arbitrary commands with root privileges, leading to full device compromise and potential network security breach.

Recommendation

Immediately update the device firmware to the latest version that fixes this vulnerability and restrict management interface access to trusted networks only.

Other vulnerabilities in Lantronix EDS3000PS

CVE-2025-67039Critical
An authentication bypass vulnerability was discovered in Lantronix EDS3000PS version 3.1.0.0R2. By appending a specific suffix to the URL and sending an Authorization header with the username 'admin', an attacker can bypass authentication on management pages.

Original NVD description (English source)

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS