CVE-2026-80143
CriticalCVSS 9.9Summary
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom read' command that passes unsanitized user input to a system() call.
Risk Assessment
Any authenticated user can achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Recommendation
Update firmware to v9.7.0.2 (SLC8000) or v9.7.0.1 (EMG8500/EMG7500); for SLB882/SLCx-03/SLCx-02 no fix is available — consider decommissioning or isolating the devices. Restrict CLI access to trusted users.
Other vulnerabilities in Lantronix SLC8000/EMG8500/EMG7500/SLB882/SLCx
See all- CVE-2026-80145Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker with the services permission can execute arbitrary shell commands as root via the 'set cifs password' command, which passes unsanitized user input to a system() call.
- CVE-2026-80144Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom write' command that passes unsanitized user input to a system() call.
Original NVD description (English source)
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc eeprom read command that passes unsanitized user input to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.