← Back

Lantronix

lantronix

43 CVEs • 85 products

Products (85)

Click to collapse
Toggle
Premierwave 2050 Firmware
premierwave_2050_firmware
23 CVEs
Eds5032 Firmware
eds5032_firmware
5 CVEs
Eds5008 Firmware
eds5008_firmware
5 CVEs
Eds5016 Firmware
eds5016_firmware
5 CVEs
Xport Edge Firmware
xport_edge_firmware
3 CVEs
Eds3016ps1ns Firmware
eds3016ps1ns_firmware
3 CVEs
Eds3008ps1ns Firmware
eds3008ps1ns_firmware
3 CVEs
Xprintserver
xprintserver
2 CVEs
Securelinx
securelinx
1 CVE
Scs3200
scs3200
1 CVE
Mss485 T
mss485-t
1 CVE
Xprintserver Firmware
xprintserver_firmware
1 CVE
Mss Firmware
mss_firmware
1 CVE
Securelinx Spider Firmware
securelinx_spider_firmware
1 CVE
Sgx Firmware
sgx_firmware
1 CVE
Premierwave 2050
premierwave_2050
1 CVE
G526gp12s Firmware
g526gp12s_firmware
1 CVE
G526gp17s Firmware
g526gp17s_firmware
1 CVE
G526gp1cs Firmware
g526gp1cs_firmware
1 CVE
G526gp1asg Firmware
g526gp1asg_firmware
1 CVE
G526gp1as Firmware
g526gp1as_firmware
1 CVE
G527gp22s Firmware
g527gp22s_firmware
1 CVE
G527gp27s Firmware
g527gp27s_firmware
1 CVE
G527gp2as Firmware
g527gp2as_firmware
1 CVE
G527gp2asg Firmware
g527gp2asg_firmware
1 CVE
G528gp2fs Firmware
g528gp2fs_firmware
1 CVE
G528gp2fsg Firmware
g528gp2fsg_firmware
1 CVE
G528gp2fsgc Firmware
g528gp2fsgc_firmware
1 CVE
X300f202s Firmware
x300f202s_firmware
1 CVE
X303f202s Firmware
x303f202s_firmware
1 CVE
X304g00as Firmware
x304g00as_firmware
1 CVE
X304g000s Firmware
x304g000s_firmware
1 CVE
X304g002s Firmware
x304g002s_firmware
1 CVE
X304g007s Firmware
x304g007s_firmware
1 CVE
X304g00cs Firmware
x304g00cs_firmware
1 CVE
E228g002s Firmware
e228g002s_firmware
1 CVE
E228g004s Firmware
e228g004s_firmware
1 CVE
E228g00cb28 Firmware
e228g00cb28_firmware
1 CVE
E228g00cs Firmware
e228g00cs_firmware
1 CVE
E213f102s Firmware
e213f102s_firmware
1 CVE
E214f002s Firmware
e214f002s_firmware
1 CVE
E214f00cs Firmware
e214f00cs_firmware
1 CVE
E214g000s Firmware
e214g000s_firmware
1 CVE
E214g001s Firmware
e214g001s_firmware
1 CVE
E218f004s Firmware
e218f004s_firmware
1 CVE
E218g107s Firmware
e218g107s_firmware
1 CVE
Mss
mss
0 CVEs
Securelinx Spider
securelinx_spider
0 CVEs
Xport Edge
xport_edge
0 CVEs
Sgx
sgx
0 CVEs
Eds5032
eds5032
0 CVEs
Eds5008
eds5008
0 CVEs
Eds5016
eds5016
0 CVEs
Eds3016ps1ns
eds3016ps1ns
0 CVEs
Eds3008ps1ns
eds3008ps1ns
0 CVEs
G526gp12s
g526gp12s
0 CVEs
G526gp17s
g526gp17s
0 CVEs
G526gp1cs
g526gp1cs
0 CVEs
G526gp1asg
g526gp1asg
0 CVEs
G526gp1as
g526gp1as
0 CVEs
G527gp22s
g527gp22s
0 CVEs
G527gp27s
g527gp27s
0 CVEs
G527gp2as
g527gp2as
0 CVEs
G527gp2asg
g527gp2asg
0 CVEs
G528gp2fs
g528gp2fs
0 CVEs
G528gp2fsg
g528gp2fsg
0 CVEs
G528gp2fsgc
g528gp2fsgc
0 CVEs
X300f202s
x300f202s
0 CVEs
X303f202s
x303f202s
0 CVEs
X304g00as
x304g00as
0 CVEs
X304g000s
x304g000s
0 CVEs
X304g002s
x304g002s
0 CVEs
X304g007s
x304g007s
0 CVEs
X304g00cs
x304g00cs
0 CVEs
E228g002s
e228g002s
0 CVEs
E228g004s
e228g004s
0 CVEs
E228g00cb28
e228g00cb28
0 CVEs
E228g00cs
e228g00cs
0 CVEs
E213f102s
e213f102s
0 CVEs
E214f002s
e214f002s
0 CVEs
E214f00cs
e214f00cs
0 CVEs
E214g000s
e214g000s
0 CVEs
E214g001s
e214g001s
0 CVEs
E218f004s
e218f004s
0 CVEs
E218g107s
e218g107s
0 CVEs

CVEs (43)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-21884
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
9.0 HIGH· v2
An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker...Show more
An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21883
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attack...Show more
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21882
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can m...Show more
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21881
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker...Show more
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21880
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to local file inclusion. An attacker can make an a...Show more
A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to local file inclusion. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21879
1Lantronix
1Premierwave 2050
Jun 17, 2026
Dec 22, 2021
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. An attacker can make...Show more
A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary file overwrite. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2021-21878
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
4.9 MEDIUM· v3
6.8 MEDIUM· v2
A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion...Show more
A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted series of HTTP requests can lead to local file inclusion. An attacker can make a series of authenticated HTTP requests to trigger this vulnerability.Show less
CVE-2021-21877
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
6.5 MEDIUM· v2
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
CVE-2021-21876
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
6.5 MEDIUM· v2
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulnerability.
CVE-2021-21875
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
9.0 HIGH· v2
A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2021-21874
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
9.0 HIGH· v2
A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2021-21873
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.1 CRITICAL· v3
9.0 HIGH· v2
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trigger this vulnerability.
CVE-2021-21872
1Lantronix
1Premierwave 2050 Firmware
Jun 17, 2026
Dec 22, 2021
N/A· v4
9.9 CRITICAL· v3
9.0 HIGH· v2
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An...Show more
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.Show less
CVE-2020-13528
1Lantronix
1Xport Edge Firmware
Jun 17, 2026
Dec 18, 2020
N/A· v4
5.3 MEDIUM· v3
2.6 LOW· v2
An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause informati...Show more
An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause information disclosure. An attacker can sniff the network to trigger this vulnerability.Show less
CVE-2020-13527
1Lantronix
2Sgx Firmware
Xport Edge Firmware
Jun 17, 2026
Dec 18, 2020
N/A· v4
4.5 MEDIUM· v3
3.5 LOW· v2
An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An...Show more
An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A specially crafted HTTP request can cause increased privileges. An attacker can send an HTTP request to trigger this vulnerability.Show less
CVE-2018-10383
1Lantronix
1Securelinx Spider Firmware
Nov 21, 2024
May 2, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.
CVE-2018-12925
1Lantronix
1Mss Firmware
Nov 21, 2024
Jun 28, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Baseon Lantronix MSS devices do not require a password for TELNET access.
CVE-2016-4325
1Lantronix
1Xprintserver Firmware
May 6, 2026
May 14, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified vectors.
CVE-2014-9003
1Lantronix
1Xprintserver
May 6, 2026
Nov 20, 2014
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitr...Show more
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests that modify configuration, as demonstrated by executing arbitrary commands using the c parameter in the rpc action.Show less
CVE-2014-9002
1Lantronix
1Xprintserver
May 6, 2026
Nov 20, 2014
N/A· v4
N/A· v3
10.0 HIGH· v2
Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc action.