Skip to content
OpenAdvisories

Vendor

LANTRONIX

28 known vulnerabilities.

Products

SLC8000 13 EMG8500 13 EMG7500 13 SLB882 13 SLC9000 13 SLCx-03 10 SLCx-02 10 G520 Series 6 EDS5000 series 5 X300 series 4 EDS3000PS series 3 Xport 2 Device Installer 1 Provisioning Manager 1 E210 series 1 E220 series 1 XPress-DR 1 XPress-DR-I 1 XPort Device Server Configuration Manager 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-67038 Exploited Public exploit EPSS 21%

    Lantronix EDS5000, G520, and X300 OS Command Injection

    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to injec…

    LANTRONIX G520 Series EDS5000 series X300 series
    KEV Jun 23, 2026
  • High 8.0
    CVE-2025-7766 Public exploit

    Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

    Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

    LANTRONIX Provisioning Manager