Stack-Based Buffer Overflow in Lantronix SLC8000, EMG8500, EMG7500, and SLB882 Products

CVE-2026-80147

What is CVE-2026-80147?

Affected Lantronix devices, including SLC8000, EMG8500, EMG7500, and SLB882, are susceptible to a stack-based buffer overflow due to an undocumented mfc eeprom write command. This vulnerability allows authenticated attackers to leverage unbounded user input into a bounded stack buffer, particularly through a system() call, which can result in arbitrary code execution. Exploitation of this flaw may lead to severe consequences, including compromising the device's confidentiality, integrity, and availability, as well as affecting connected downstream serial-attached devices.

References