{"cve_id":"CVE-2025-67038","published":"2026-03-11T17:16:52.010000+00:00","last_modified":"2026-09-08T19:00:57.803000+00:00","vuln_status":"Analyzed","description":"An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","base_score":9.8,"base_severity":"CRITICAL","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-78"],"in_kev":true,"kev_date_added":"2026-06-23","kev_ransomware":false,"epss_score":0.20286,"epss_percentile":0.97475,"cap_rule_version":"0.1.1","stage":"INITIAL_ACCESS","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-07T06:53:58.398142+00:00","first_seen":"2026-03-11T17:16:52.010000+00:00","kev_first_seen":"2026-06-23T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["lantronix"],"products":["e213f102s","e213f102s_firmware","e214f002s","e214f002s_firmware","e214f00cs","e214f00cs_firmware","e214g000s","e214g000s_firmware","e214g001s","e214g001s_firmware","e218f004s","e218f004s_firmware","e218g107s","e218g107s_firmware","e228g002s","e228g002s_firmware","e228g004s","e228g004s_firmware","e228g00cb28","e228g00cb28_firmware","e228g00cs","e228g00cs_firmware","eds5008","eds5008_firmware","eds5016","eds5016_firmware","eds5032","eds5032_firmware","g526gp12s","g526gp12s_firmware","g526gp17s","g526gp17s_firmware","g526gp1as","g526gp1as_firmware","g526gp1asg","g526gp1asg_firmware","g526gp1cs","g526gp1cs_firmware","g527gp22s","g527gp22s_firmware","g527gp27s","g527gp27s_firmware","g527gp2as","g527gp2as_firmware","g527gp2asg","g527gp2asg_firmware","g528gp2fs","g528gp2fs_firmware","g528gp2fsg","g528gp2fsg_firmware","g528gp2fsgc","g528gp2fsgc_firmware","x300f202s","x300f202s_firmware","x303f202s","x303f202s_firmware","x304g000s","x304g000s_firmware","x304g002s","x304g002s_firmware","x304g007s","x304g007s_firmware","x304g00as","x304g00as_firmware","x304g00cs","x304g00cs_firmware"],"affected":[{"vendor":"lantronix","product":"e213f102s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e214f002s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e214f00cs_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e214g000s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e214g001s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e218f004s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e218g107s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e228g002s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e228g004s_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e228g00cb28_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"e228g00cs_firmware","ranges":["< 3.21.0.0R1"]},{"vendor":"lantronix","product":"eds5008_firmware","ranges":["< 2.2.0.0r1"]},{"vendor":"lantronix","product":"eds5016_firmware","ranges":["< 2.2.0.0r1"]},{"vendor":"lantronix","product":"eds5032_firmware","ranges":["< 2.2.0.0r1"]},{"vendor":"lantronix","product":"g526gp12s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g526gp17s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g526gp1as_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g526gp1asg_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g526gp1cs_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g527gp22s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g527gp27s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g527gp2as_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g527gp2asg_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g528gp2fs_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g528gp2fsg_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"g528gp2fsgc_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x300f202s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x303f202s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x304g000s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x304g002s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x304g007s_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x304g00as_firmware","ranges":["< 2.6.0.4R6"]},{"vendor":"lantronix","product":"x304g00cs_firmware","ranges":["< 2.6.0.4R6"]}]}