CVE-2025-67034

🗓️ 11 Mar 2026 00:00:00Reported by mitreType

Authenticated attacker can inject commands via name field when deleting SSL credentials on Lantronix EDS5000, with root privileges.

Reporter	Title	Published	Views	Family All 10
attackerkb	CVE-2025-67034	11 Mar 202600:00	–	attackerkb
Circl	CVE-2025-67034	10 Mar 202611:00	–	circl
CNNVD	Lantronix EDS5000 安全漏洞	11 Mar 202600:00	–	cnnvd
Cvelist	CVE-2025-67034 Lantronix EDS5000, G520, and X300 OS Command Injection	11 Mar 202600:00	–	cvelist
EUVD	EUVD-2025-208579	11 Mar 202618:30	–	euvd
NVD	CVE-2025-67034	11 Mar 202617:16	–	nvd
Positive Technologies	PT-2026-24722	11 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2025-67034	26 Mar 202615:19	–	redhatcve
The Hacker News	22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters	21 Apr 202615:46	–	thn
Vulnrichment	CVE-2025-67034 Lantronix EDS5000, G520, and X300 OS Command Injection	11 Mar 202600:00	–	vulnrichment

NVD

Vulners

Node

AND

lantronix eds5032_firmwareMatch2.1.0.0r3

lantronix eds5032Match-

Node

AND

lantronix eds5008_firmwareMatch2.1.0.0r3

lantronix eds5008Match-

Node

AND

lantronix eds5016_firmwareMatch2.1.0.0r3

lantronix eds5016Match-

[
  {
    "vendor": "Lantronix",
    "product": "EDS5000 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "2.1.0.0R3",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.2.0.0R1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "G520 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.0.4R6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.6.0.4R6"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "X300 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.0.4R6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.6.0.4R6"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
lantronix	www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json

04 Sep 2026 20:22Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.8

CVSS 48.6

EPSS0.00496

SSVC