Lantronix SLC8000/EMG8500/EMG7500/SLB882/SLCx vulnerabilities
3 known CVE vulnerabilities in Lantronix SLC8000/EMG8500/EMG7500/SLB882/SLCx, translated and rated.
- CVE-2026-80145Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker with the services permission can execute arbitrary shell commands as root via the 'set cifs password' command, which passes unsanitized user input to a system() call.
- CVE-2026-80144Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom write' command that passes unsanitized user input to a system() call.
- CVE-2026-80143Critical
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability. An authenticated attacker can execute arbitrary shell commands as root via an undocumented 'mfc eeprom read' command that passes unsanitized user input to a system() call.