Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 12, 2026
CVE-2025-67037
CVE-2025-67037
Description
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected commands are executed with root privileges.
Affected products
2- Lantronix/EDS5000description
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.