CVE-2025-67041

CRITICAL

Lantronix EDS3000PS 3.1.0.0R2 - Command Injection

Title source: llm
STIX 2.1

Description

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

References (3)

Core 3
Core References
Various Sources
http://eds3000ps.com
Various Sources
http://lantronix.com
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02

Scores

CVSS v3 9.8
EPSS 0.0043
EPSS Percentile 34.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-288 CWE-620 CWE-78
Status published
Products (2)
lantronix/eds3008ps1ns_firmware 3.1.0.0 r2
lantronix/eds3016ps1ns_firmware 3.1.0.0 r2
Published Mar 11, 2026
Tracked Since Mar 12, 2026