Secuno
ENNL
Book demo

CVE-2025-67038

Lantronix EDS5000 Code Injection

9.8 CRITICALActively exploited (CISA KEV)EPSS 19.3%
  1. Published11 Mar 2026
  2. Added to CISA KEV23 Jun 2026
  3. Remediation due26 Jun 2026
Actively exploited (CISA KEV)

Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

Added to KEV: 23 Jun 2026Federal remediation due: 26 Jun 2026

Description

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Lantronix E213f102s Firmware< 3.21.0.0R1
Lantronix E214f002s Firmware< 3.21.0.0R1
Lantronix E214f00cs Firmware< 3.21.0.0R1
Lantronix E214g000s Firmware< 3.21.0.0R1
Lantronix E214g001s Firmware< 3.21.0.0R1
Lantronix E218f004s Firmware< 3.21.0.0R1
Lantronix E218g107s Firmware< 3.21.0.0R1
Lantronix E228g002s Firmware< 3.21.0.0R1
Lantronix E228g004s Firmware< 3.21.0.0R1
Lantronix E228g00cb28 Firmware< 3.21.0.0R1
Lantronix E228g00cs Firmware< 3.21.0.0R1
Lantronix Eds5008 Firmware< 2.2.0.0r1
Lantronix Eds5016 Firmware< 2.2.0.0r1
Lantronix Eds5032 Firmware< 2.2.0.0r1
Lantronix G526gp12s Firmware< 2.6.0.4R6
Lantronix G526gp17s Firmware< 2.6.0.4R6
Lantronix G526gp1as Firmware< 2.6.0.4R6
Lantronix G526gp1asg Firmware< 2.6.0.4R6
Lantronix G526gp1cs Firmware< 2.6.0.4R6
Lantronix G527gp22s Firmware< 2.6.0.4R6
Lantronix G527gp27s Firmware< 2.6.0.4R6
Lantronix G527gp2as Firmware< 2.6.0.4R6
Lantronix G527gp2asg Firmware< 2.6.0.4R6
Lantronix G528gp2fs Firmware< 2.6.0.4R6

Remediation

Fixed in
Lantronix E213f102s Firmware≥ 3.21.0.0R1
Lantronix E214f002s Firmware≥ 3.21.0.0R1
Lantronix E214f00cs Firmware≥ 3.21.0.0R1
Lantronix E214g000s Firmware≥ 3.21.0.0R1
Lantronix E214g001s Firmware≥ 3.21.0.0R1
Lantronix E218f004s Firmware≥ 3.21.0.0R1
Lantronix E218g107s Firmware≥ 3.21.0.0R1
Lantronix E228g002s Firmware≥ 3.21.0.0R1
Lantronix E228g004s Firmware≥ 3.21.0.0R1
Lantronix E228g00cb28 Firmware≥ 3.21.0.0R1

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-10911010.0
A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function…
CVE-2026-1091089.9
A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This…
CVE-2026-820968.8
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker…
CVE-2026-185298.7
IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is…
CVE-2025-714299.8
GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in…
CVE-2020-372798.1
easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that…

Frequently asked

Is CVE-2025-67038 being actively exploited?

Yes. CVE-2025-67038 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 23 Jun 2026.

How severe is CVE-2025-67038?

CVE-2025-67038 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 19.3% probability of exploitation.

Which products are affected by CVE-2025-67038?

Affected products include Lantronix E213f102s Firmware, Lantronix E214f002s Firmware, Lantronix E214f00cs Firmware, Lantronix E214g000s Firmware, Lantronix E214g001s Firmware, and 19 more.

How do I fix CVE-2025-67038?

Upgrade affected software to a fixed version, for example Lantronix E213f102s Firmware 3.21.0.0R1, Lantronix E214f002s Firmware 3.21.0.0R1, Lantronix E214f00cs Firmware 3.21.0.0R1 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-67038 against the real software inventory on every managed device, as each hourly inventory arrives. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, a risk for it never ranks below high, and the update that fixes it moves to the Emergency patch lane. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.