EDS3000PS series vulnerabilities

2 known vulnerabilities in EDS3000PS series from Lantronix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  EDS3000PS series: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-67041Mar 11, 2026Lantronix

  An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privilege

• 9.8 Critical severity

  EDS3000PS series: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-67039Mar 11, 2026Lantronix

  An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.