CVE-2025-7766

High CVSS: 8.6

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

Vendor

Product

CWE

CWE-611

Yayın Tarihi

2025-07-22 22:15:38

Güncelleme

2025-07-25 15:29:44

Source Identifier

ics-cert@hq.dhs.gov

KEV Date Added

Kategoriler

CWE-611 HIGH 2025

Referanslar

https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/105906637/Latest+Version+of+Lantronix+Provisioning+Manager+LPM https://www.cisa.gov/news-events/ics-advisories/icsa-25-203-02