Unrated severityNVD Advisory· Published Mar 11, 2026· Updated Mar 11, 2026

CVE-2025-67041

Description

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Lantronix/EDS3000PScpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 3.1.0.0R2

Patches

Vulnerability mechanics

References

eds3000ps.commitre
lantronix.commitre
www.cisa.gov/news-events/ics-advisories/icsa-26-069-02mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000