CVE-2025-67038

🗓️ 11 Mar 2026 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 178 Views

CVE 2025 67038: Lantronix EDS5000 logs with unsanitized username, enabling root command injection.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Code Injection in Lantronix Eds5032_Firmware	25 Jun 202606:06	–	githubexploit
ATTACKERKB	CVE-2025-67038	11 Mar 202600:00	–	attackerkb
Circl	CVE-2025-67038	10 Mar 202611:00	–	circl
CISA KEV Catalog	Lantronix EDS5000 Code Injection Vulnerability	23 Jun 202600:00	–	cisa_kev
CNNVD	Lantronix EDS5000 安全漏洞	11 Mar 202600:00	–	cnnvd
Cvelist	CVE-2025-67038 Lantronix EDS5000, G520, and X300 OS Command Injection	11 Mar 202600:00	–	cvelist
EUVD	EUVD-2025-204576	19 Dec 202518:31	–	euvd
EUVD	EUVD-2025-208587	11 Mar 202618:30	–	euvd
Kitploit	CVE-2025-67038	7 Sep 202608:54	–	kitploit
NVD	CVE-2025-67038	11 Mar 202617:16	–	nvd

NVD

Vulners

Node

AND

lantronix eds5008_firmwareRange<2.2.0.0r1

lantronix eds5008Match-

Node

AND

lantronix eds5016_firmwareRange<2.2.0.0r1

lantronix eds5016Match-

Node

AND

lantronix eds5032_firmwareRange<2.2.0.0r1

lantronix eds5032Match-

Node

AND

lantronix g526gp12s_firmwareRange<2.6.0.4R6

lantronix g526gp12sMatch-

Node

AND

lantronix g526gp17s_firmwareRange<2.6.0.4R6

lantronix g526gp17sMatch-

Node

AND

lantronix g526gp1cs_firmwareRange<2.6.0.4R6

lantronix g526gp1csMatch-

Node

AND

lantronix g526gp1asg_firmwareRange<2.6.0.4R6

lantronix g526gp1asgMatch-

Node

AND

lantronix g526gp1as_firmwareRange<2.6.0.4R6

lantronix g526gp1asMatch-

Node

AND

lantronix g527gp22s_firmwareRange<2.6.0.4R6

lantronix g527gp22sMatch-

Node

AND

lantronix g527gp27s_firmwareRange<2.6.0.4R6

lantronix g527gp27sMatch-

Node

AND

lantronix g527gp2as_firmwareRange<2.6.0.4R6

lantronix g527gp2asMatch-

Node

AND

lantronix g527gp2asg_firmwareRange<2.6.0.4R6

lantronix g527gp2asgMatch-

Node

AND

lantronix g528gp2fs_firmwareRange<2.6.0.4R6

lantronix g528gp2fsMatch-

Node

AND

lantronix g528gp2fsg_firmwareRange<2.6.0.4R6

lantronix g528gp2fsgMatch-

Node

AND

lantronix g528gp2fsgc_firmwareRange<2.6.0.4R6

lantronix g528gp2fsgcMatch-

Node

AND

lantronix x300f202s_firmwareRange<2.6.0.4R6

lantronix x300f202sMatch-

Node

AND

lantronix x303f202s_firmwareRange<2.6.0.4R6

lantronix x303f202sMatch-

Node

AND

lantronix x304g00as_firmwareRange<2.6.0.4R6

lantronix x304g00asMatch-

Node

AND

lantronix x304g000s_firmwareRange<2.6.0.4R6

lantronix x304g000sMatch-

Node

AND

lantronix x304g002s_firmwareRange<2.6.0.4R6

lantronix x304g002sMatch-

Node

AND

lantronix x304g007s_firmwareRange<2.6.0.4R6

lantronix x304g007sMatch-

Node

AND

lantronix x304g00cs_firmwareRange<2.6.0.4R6

lantronix x304g00csMatch-

Node

AND

lantronix e228g002s_firmwareRange<3.21.0.0R1

lantronix e228g002sMatch-

Node

AND

lantronix e228g004s_firmwareRange<3.21.0.0R1

lantronix e228g004sMatch-

Node

AND

lantronix e228g00cb28_firmwareRange<3.21.0.0R1

lantronix e228g00cb28Match-

Node

AND

lantronix e228g00cs_firmwareRange<3.21.0.0R1

lantronix e228g00csMatch-

Node

AND

lantronix e213f102s_firmwareRange<3.21.0.0R1

lantronix e213f102sMatch-

Node

AND

lantronix e214f002s_firmwareRange<3.21.0.0R1

lantronix e214f002sMatch-

Node

AND

lantronix e214f00cs_firmwareRange<3.21.0.0R1

lantronix e214f00csMatch-

Node

AND

lantronix e214g000s_firmwareRange<3.21.0.0R1

lantronix e214g000sMatch-

Node

AND

lantronix e214g001s_firmwareRange<3.21.0.0R1

lantronix e214g001sMatch-

Node

AND

lantronix e218f004s_firmwareRange<3.21.0.0R1

lantronix e218f004sMatch-

Node

AND

lantronix e218g107s_firmwareRange<3.21.0.0R1

lantronix e218g107sMatch-

[
  {
    "vendor": "Lantronix",
    "product": "EDS5000 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "2.1.0.0R3",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.2.0.0R1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "G520 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.0.4R6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.6.0.4R6"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "X300 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.6.0.4R6",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "2.6.0.4R6"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "E210 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.21.0.0R1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "3.21.0.0R1"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Lantronix",
    "product": "E220 series",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.21.0.0R1",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "3.21.0.0R1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
lantronix	www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

08 Sep 2026 19:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 49.3

CVSS 3.19.8

EPSS0.1926

SSVC