CVE-2026-80143
CVE-2026-80143
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc eeprom read command that passes unsanitized user input to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Weakness classification (CWE)
References
- revrb.net/2026/09/21/revrb-lantern.html (technical-description)
- ts.lantronix.com/ftp/slc8000/9.7.0.2R1/ (patch)
- ts.lantronix.com/ftp/emg/EMG_8500/9.7.0.1R2/ (patch)
- ts.lantronix.com/ftp/emg/EMG_7500/9.7.0.1R2/ (patch)
- www.vulncheck.com/advisories/lantronix-autonomous-out-of-band-devices-cli-comma… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-80143?
- CVE-2026-80143 is a critical-severity vulnerability, classified under OS Command Injection. CVSS score: 9.9/10. Published 2026-09-22.
- How severe is CVE-2026-80143?
- Critical severity. CVSS v3 base score is 9.9 out of 10.