CVE-2025-67041
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
Description
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.
Affected (2)
Products: Lantronix: Eds3016ps1ns Firmware, Eds3008ps1ns Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.0.0r2 |
| Running on/with | Platform Versions |
|---|---|
Lantronix Eds3016ps1ns | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 3.1.0.0r2 |
| Running on/with | Platform Versions |
|---|---|
Lantronix Eds3008ps1ns | All versions |
Related CWEs
CWE-288
Authentication Bypass Using an Alternate Path or Channel
A product requires authentication, but the product has an alternate path or channel that does not require authentication.
CWE-620
Unverified Password Change
When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
References (1)
Source: cve@mitre.org
Third Party AdvisoryUS Government Resource
Timeline
No history available yet.