Description
Lantronix XPort sends weakly encoded credentials within web request headers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lantronix | XPort | 2.0.0.13 | — |
Advisories 1
- ICSA-24-023-05 Lantronix XPort CISA ICS & IT advisories · Jan 23, 2024
Medium · 5.7
CVE-2023-7237
EUVD-2023-59418GHSA-3gg4-v4m9-rj55
Lantronix XPort Weak Encoding for Password
Published Jan 23, 2024 · Updated Jun 17, 2025 · Assigned by icscert