Lantronix Eds5008 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lantronix Eds5008 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2025-67035 — CVSS 9.8 (critical): An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection…
• CVE-2025-67038 — CVSS 9.8 (critical) — actively exploited: An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's…
• CVE-2025-67034 — CVSS 8.8 (high): An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when…
• CVE-2025-67036 — CVSS 8.8 (high): An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a…
• CVE-2025-67037 — CVSS 8.8 (high): An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when…