CVE-2025-67037 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel conne…
High CVSS: 8.8

CVE-2025-67037

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected commands are executed with root privileges.
Vendor
Lantronix
Product
Eds5032 Firmware
CWE
CWE-94
Yayın Tarihi
2026-03-11 17:16:51
Güncelleme
2026-03-19 20:13:48
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-94 Eds5032 Firmware HIGH Lantronix 2026

Referanslar

http://eds5000.com http://lantronix.com https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02