Lantronix SLC8000/EMG8500/EMG7500/SLB882 vulnerabilities
3 known CVE vulnerabilities in Lantronix SLC8000/EMG8500/EMG7500/SLB882, translated and rated.
- CVE-2026-80150High
Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish Telnet connections to attacker-controlled endpoints. By modifying the rooturl parameter, an attacker redirects the Telnet terminal connection to an arbitrary host or IP.
- CVE-2026-80149High
Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish SSH connections to attacker-controlled endpoints. By modifying the rooturl parameter, an attacker redirects the SSH terminal connection to an arbitrary host or IP.
- CVE-2026-80148High
Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 contain a server-side request forgery vulnerability in the WebSSH/WebTelnet listener that allows unauthenticated attackers to cause the affected device to establish SSH connections to attacker-controlled endpoints. By supplying an overlong username string, an attacker causes the device IP suffix to be truncated, redirecting the resulting connection to an arbitrary host.