> CVE-2025-67035

« BACK_TO_HOME
PUBLISHED
2026-03-11 17:16
MODIFIED
2026-03-11 17:16
EPSS (Prob. Exploit)
0.43%
Top 63.7%
DATA SOURCES:
NVD 🔗 2026-03-11 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An attacker can inject arbitrary commands in delete actions of various objects, such as server keys, users, and known hosts. Commands are executed with root privileges.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
11/03/2026 17:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 7 months ago

> REFERENCES

http://eds5000.com
http://lantronix.com
https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
« BACK_TO_HOME