Authentication Bypass in Lantronix EDS3000PS Management Interface

CVE-2025-67039

What is CVE-2025-67039?

A security flaw has been identified in the Lantronix EDS3000PS management interface that allows unauthorized users to bypass authentication mechanisms. By appending a specific suffix to the URL and utilizing 'admin' as the username in the Authorization header, an attacker can gain access to restricted management pages. This vulnerability poses a risk of unauthorized control over the device, potentially leading to further exploits.

References