VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 12, 2026

CVE-2025-67035

CVE-2025-67035

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Lantronix/EDS5000cpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =2.1.0.0R3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.