CVE-2026-80145
CriticalCVSS 9.1Summary
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker with the services permission can execute arbitrary shell commands as root via the 'set cifs password' command, which passes unsanitized user input to a system() call.
Risk Assessment
An attacker with the services permission can achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Recommendation
Update firmware to v9.7.0.2 (SLC8000) or v9.7.0.1 (EMG8500/EMG7500); for SLB882/SLCx-03/SLCx-02 no fix is available — consider decommissioning or isolating the devices. Restrict the services permission to trusted administrators.
Other vulnerabilities in Lantronix SLC8000/EMG8500/EMG7500/SLB882/SLCx
See all- CVE-2026-80144Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom write' command that passes unsanitized user input to a system() call.
- CVE-2026-80143Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom read' command that passes unsanitized user input to a system() call.
Original NVD description (English source)
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set cifs password command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.