VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 12, 2026

CVE-2025-67034

CVE-2025-67034

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credentials through the management interface. Injected commands are executed with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lantronix/EDS5000cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: = 2.1.0.0R3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.