CVE Catalog
CVE-2025-70082
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.41%
33th percentile - higher than 33% of all known CVEs
Summary
An issue in Lantronix EDS3000PS v.3.1.0.0R2 allows an attacker to execute arbitrary code and obtain sensitive information via the ltrx_evo component.
Risk Assessment
An attacker could take control of the device, steal confidential data, or use it as an entry point for further attacks on the organization's network.
Recommendation
Immediately update the Lantronix EDS3000PS firmware to the latest available version and restrict access to the ltrx_evo component to trusted hosts only.
Original NVD description (English source)
An issue in Lantronix EDS3000PS v.3.1.0.0R2 allows an attacker to execute arbitrary code and obtain sensitive information via the ltrx_evo component