Command Injection Vulnerability in Lantronix EDS5000 Management Interface

CVE-2025-67034

What is CVE-2025-67034?

A command injection flaw was identified in the management interface of Lantronix EDS5000 version 2.1.0.0R3. Authenticated attackers may exploit this flaw by injecting malicious OS commands into the 'name' parameter while attempting to delete SSL credentials. These commands, once injected, are executed with root-level privileges, potentially leading to unauthorized access and control over the affected device.

References