CVE-2025-67038

Published: Mar 11, 2026Modified: Sep 8, 2026CISA KEV

9.3

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: ics-cert@hq.dhs.gov (Secondary)

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

Affected (33)

Products: Lantronix: Eds5008 Firmware, Eds5016 Firmware, Eds5032 Firmware, G526gp12s Firmware, G526gp17s Firmware, G526gp1cs Firmware, G526gp1asg Firmware, G526gp1as Firmware, G527gp22s Firmware, G527gp27s Firmware, G527gp2as Firmware, G527gp2asg Firmware, G528gp2fs Firmware, G528gp2fsg Firmware, G528gp2fsgc Firmware, X300f202s Firmware, X303f202s Firmware, X304g00as Firmware, X304g000s Firmware, X304g002s Firmware, X304g007s Firmware, X304g00cs Firmware, E228g002s Firmware, E228g004s Firmware, E228g00cb28 Firmware, E228g00cs Firmware, E213f102s Firmware, E214f002s Firmware, E214f00cs Firmware, E214g000s Firmware, E214g001s Firmware, E218f004s Firmware, E218g107s Firmware

33 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix Eds5008 Firmware	Before 2.2.0.0r1

Running on/with	Platform Versions
Lantronix Eds5008	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix Eds5016 Firmware	Before 2.2.0.0r1

Running on/with	Platform Versions
Lantronix Eds5016	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix Eds5032 Firmware	Before 2.2.0.0r1

Running on/with	Platform Versions
Lantronix Eds5032	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G526gp12s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G526gp12s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G526gp17s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G526gp17s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G526gp1cs Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G526gp1cs	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G526gp1asg Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G526gp1asg	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G526gp1as Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G526gp1as	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G527gp22s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G527gp22s	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G527gp27s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G527gp27s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G527gp2as Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G527gp2as	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G527gp2asg Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G527gp2asg	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G528gp2fs Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G528gp2fs	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G528gp2fsg Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G528gp2fsg	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix G528gp2fsgc Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix G528gp2fsgc	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X300f202s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X300f202s	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X303f202s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X303f202s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X304g00as Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X304g00as	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X304g000s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X304g000s	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X304g002s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X304g002s	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X304g007s Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X304g007s	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix X304g00cs Firmware	Before 2.6.0.4R6

Running on/with	Platform Versions
Lantronix X304g00cs	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E228g002s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E228g002s	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E228g004s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E228g004s	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E228g00cb28 Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E228g00cb28	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E228g00cs Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E228g00cs	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E213f102s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E213f102s	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E214f002s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E214f002s	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E214f00cs Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E214f00cs	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E214g000s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E214g000s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E214g001s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E214g001s	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E218f004s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E218f004s	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lantronix E218g107s Firmware	Before 3.21.0.0R1

Running on/with	Platform Versions
Lantronix E218g107s	All versions

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (4)

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json

Source: ics-cert@hq.dhs.gov

Third Party Advisory

https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw

Source: ics-cert@hq.dhs.gov

Vendor Advisory

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-67038

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.