Lantronix

61 CVEs across 71 Lantronix products. Browse Lantronix vulnerabilities, severities, and proof-of-concept exploits.

Lantronix products with known CVEs

ProductCVEs
Premierwave 205024
Premierwave 2050 Firmware23
Emg750013
Emg850013
Slb88213
Slc800013
Slc900010
Slcx-0210
Slcx-0310
Eds50085
Eds5008 Firmware5
Eds50165
Eds5016 Firmware5
Eds50325
Eds5032 Firmware5
Eds3000ps Series3
Eds3008ps1ns3
Eds3008ps1ns Firmware3
Eds3016ps1ns3
Eds3016ps1ns Firmware3
G520 Series3
Xport Edge3
Xport Edge Firmware3
Xport2
Xprintserver2
Device Installer1
E210 Series1
E213f102s Firmware1
E214f002s Firmware1
E214f00cs Firmware1
E214g000s Firmware1
E214g001s Firmware1
E218f004s Firmware1
E218g107s Firmware1
E220 Series1
E228g002s Firmware1
E228g004s Firmware1
E228g00cb28 Firmware1
E228g00cs Firmware1
Eds5000 Series1
G526gp12s Firmware1
G526gp17s Firmware1
G526gp1as Firmware1
G526gp1asg Firmware1
G526gp1cs Firmware1
G527gp22s Firmware1
G527gp27s Firmware1
G527gp2as Firmware1
G527gp2asg Firmware1
G528gp2fs Firmware1
Lantronix CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-91191High7.52026-09-29The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock don…
CVE-2026-84409High7.52026-09-29The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A…
CVE-2026-80156Critical9.12026-09-22Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLC…
CVE-2026-80155Critical10.02026-09-22Lantronix SLC8000 before firmware v9.7.0.5, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLC…
CVE-2026-80154Critical9.62026-09-22All firmware versions of Lantronix SLC8000, SLC9000, EMG8500, EMG7500, SLB882, SLCx-03, and SLCx-02 contain an authentication bypass vulnerability in the web m…
CVE-2026-80152Critical9.12026-09-22Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLC…
CVE-2026-80151Critical9.12026-09-22Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLC…
CVE-2026-80150High7.52026-09-22Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 con…
CVE-2026-80149High8.62026-09-22Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 con…
CVE-2026-80148High8.62026-09-22Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882 con…
CVE-2026-80147Critical9.92026-09-22Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a sta…
CVE-2026-80146Critical9.92026-09-22Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a sta…
CVE-2026-80145Critical9.12026-09-22Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a com…
CVE-2026-80144Critical9.92026-09-22Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a com…
CVE-2026-80143Critical9.92026-09-22Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a com…
CVE-2025-70082Low2.72026-03-11The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may a…
CVE-2025-67041High7.22026-03-11An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This…
CVE-2025-67039Critical9.82026-03-11An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and…
CVE-2025-67038Critical9.82026-03-11An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The userna…
CVE-2025-67037High7.22026-03-11An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel conn…
CVE-2025-67036High7.22026-03-11An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitizatio…
CVE-2025-67035High7.22026-03-11An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missin…
CVE-2025-67034High7.22026-03-11An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credential…
CVE-2025-7766High8.02025-07-22Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remo…
CVE-2025-4338Medium6.82025-05-22Lantronix Device installer is vulnerable to XML external entity (XXE) attacks in configuration files read from the network device. An attacker could obtain cre…
CVE-2025-2567Critical9.82025-04-15An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result…
CVE-2023-7237Medium5.72024-01-23 Lantronix XPort sends weakly encoded credentials within web request headers.
CVE-2021-21896Medium6.52021-12-22A directory traversal vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafte…
CVE-2021-21895High7.22021-12-22A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP…
CVE-2021-21894Critical9.12021-12-22A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP…
CVE-2021-21892Critical9.92021-12-22A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially cr…
CVE-2021-21891Critical9.12021-12-22A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A speciall…
CVE-2021-21890Critical9.12021-12-22A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A speciall…
CVE-2021-21889Critical9.92021-12-22A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted…
CVE-2021-21888Critical9.12021-12-22An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A speci…
CVE-2021-21887Critical9.12021-12-22A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A special…
CVE-2021-21886Medium4.32021-12-22A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP requ…
CVE-2021-21885High7.22021-12-22A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request ca…
CVE-2021-21884Critical9.12021-12-22An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP…
CVE-2021-21883Critical9.92021-12-22An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HT…
CVE-2021-21882High8.82021-12-22An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP reque…
CVE-2021-21881Critical9.92021-12-22An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-cra…
CVE-2021-21880High7.22021-12-22A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP reques…
CVE-2021-21879High8.82021-12-22A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP reque…
CVE-2021-21878Medium4.92021-12-22A local file inclusion vulnerability exists in the Web Manager Applications and FsBrowse functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-cra…
CVE-2021-21877Critical9.12021-12-22Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests. An attacker can make authenticated HTTP requests to trigger this vul…
CVE-2021-21876Critical9.12021-12-22Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests. An attacker can make authenticated HTTP requests to trigger this vulne…
CVE-2021-21875Critical9.12021-12-22A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter. An attacker can make an authenticated HTTP request to trigg…
CVE-2021-21874Critical9.12021-12-22A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter. An attacker can make an authenticated HTTP request to trig…
CVE-2021-21873Critical9.12021-12-22A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter. An attacker can make an authenticated HTTP request to trig…
CVE-2021-21872Critical9.92021-12-22An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-craf…
CVE-2020-13528Medium5.32020-12-18An information disclosure vulnerability exists in the Web Manager and telnet CLI functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4…
CVE-2020-13527Medium4.52020-12-18An authentication bypass vulnerability exists in the Web Manager functionality of Lantronix XPort EDGE 3.0.0.0R11, 3.1.0.0R9, 3.4.0.0R12 and 4.2.0.0R7. A speci…
CVE-2018-10383Medium6.12019-05-02Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the auth.asp login page.
CVE-2018-12925Critical9.82018-06-28Baseon Lantronix MSS devices do not require a password for TELNET access.
CVE-2016-4325Critical9.82016-05-14Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access via unspecified ve…
CVE-2014-90032014-11-20Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote attackers to hijack the authentication of administrators for requests t…
CVE-2014-90022014-11-20Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c parameter in an rpc act…
CVE-2008-72012009-09-10Lantronix MSS485-T allows remote attackers to cause a denial of service (unstable performance and service loss) via certain vulnerability scans, as demonstrate…
CVE-2007-59812007-11-15Lantronix SCS3200 does not properly handle public-key requests, which allows remote attackers to cause a denial of service (unresponsive device) via unspecifie…
CVE-2005-21892005-07-11Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows rem…