IM
IronMonkey Threat Research

CVE-2025-67035 CRITICAL

Published: 2026-03-11 | Last Modified: 2026-07-05 | Status: Modified

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

Additional Descriptions (1)

Se descubrió un problema en Lantronix EDS5000 2.1.0.0R3. Las páginas del Cliente SSH y del Servidor SSH están afectadas por múltiples vulnerabilidades de inyección de sistema operativo debido a la falta de saneamiento de los parámetros de entrada. Un atacante puede inyectar comandos arbitrarios en acciones de eliminación de varios objetos, como claves de servidor, usuarios y hosts conocidos. Los comandos se ejecutan con privilegios de root.

CVSS Metrics

Base Score: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Type: Secondary

Exploitability Score: 3.9

Impact Score: 5.9

Weaknesses

Source Type Description
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-94

Affected Products

Vendor Product Version Update Type
lantronix eds5032_firmware 2.1.0.0r3 <built-in method update of dict object at 0x7763a06a3540> Operating System
lantronix eds5008_firmware 2.1.0.0r3 <built-in method update of dict object at 0x7763bb2cae40> Operating System
lantronix eds5016_firmware 2.1.0.0r3 <built-in method update of dict object at 0x7763a06a26c0> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:lantronix:eds5032_firmware:2.1.0.0r3:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:lantronix:eds5032:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:lantronix:eds5008_firmware:2.1.0.0r3:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:lantronix:eds5008:-:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:lantronix:eds5016_firmware:2.1.0.0r3:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
No cpe:2.3:h:lantronix:eds5016:-:*:*:*:*:*:*:*

References

Notification
Message here