Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 11, 2026

CVE-2025-67041

Description

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

Affected products

Lantronix/EDS3000PSdescription
Lantronix/EDS3000PSllm-fuzzy
Range: = 3.1.0.0R2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

eds3000ps.commitre
lantronix.commitre
www.cisa.gov/news-events/ics-advisories/icsa-26-069-02mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000