What is CVE-2025-2567?

CVE-2025-2567 is a critical-severity vulnerability in Lantronix Xport, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2025-04-15.

How severe is CVE-2025-2567?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Lantronix Xport

CVE-2025-2567

An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation.

Vulnerability class: Broken Authentication

EPSS: 0.003 (54.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lantronix Xport — versions 6.5.0.7

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

Frequently asked questions

What is CVE-2025-2567?: CVE-2025-2567 is a critical-severity vulnerability in Lantronix Xport, classified under Missing Authentication for Critical Function. CVSS score: 9.8/10. Published 2025-04-15.
How severe is CVE-2025-2567?: Critical severity. CVSS v3 base score is 9.8 out of 10.