目标达成 感谢每一位支持者 — 我们达成了 100% 目标!

目标: 1000 元 · 已筹: 1336

100%

Lantronix 厂商漏洞列表 / CVE 中文分析 25

Lantronix 厂商相关 25 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。

Lantronix 专注于提供工业物联网设备连接解决方案,包括串口服务器和嵌入式模块。历史上,其产品常见漏洞包括远程代码执行、跨站脚本请求伪造和权限绕过问题。CVE 记录显示,部分设备存在默认凭证硬编码和未授权访问风险,尤其在旧版固件中较为突出。厂商已发布安全更新,建议用户及时升级并修改默认配置以降低攻击面。

CVE ID 标题 CVSS 风险等级 Published
CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass — SLC8000 CWE-22 9.1 Critical 2026-09-22
CVE-2026-80155 Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation — SLC8000 CWE-22 10.0 Critical 2026-09-22
CVE-2026-80154 Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass — SLC8000 CWE-330 9.6 Critical 2026-09-22
CVE-2026-80152 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80151 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80150 Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter — SLC8000 CWE-918 7.5 High 2026-09-22
CVE-2026-80149 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter — SLC8000 CWE-918 8.6 High 2026-09-22
CVE-2026-80148 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation — SLC8000 CWE-918 8.6 High 2026-09-22
CVE-2026-80147 Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write — SLC8000 CWE-121 9.9 Critical 2026-09-22
CVE-2026-80146 Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read — SLC8000 CWE-121 9.9 Critical 2026-09-22
CVE-2026-80145 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80144 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write — SLC8000 CWE-78 9.9 Critical 2026-09-22
CVE-2026-80143 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read — SLC8000 CWE-78 9.9 Critical 2026-09-22
CVE-2025-70082 Lantronix EDS3000PS 安全漏洞 — EDS3000PS series CWE-620 2.7 Low 2026-03-11
CVE-2025-67039 Lantronix EDS3000PS 安全漏洞 — EDS3000PS series CWE-288 9.8 Critical 2026-03-11
CVE-2025-67037 Lantronix EDS5000 安全漏洞 — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67036 Lantronix EDS5000 安全漏洞 — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67034 Lantronix EDS5000 安全漏洞 — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67038 Lantronix EDS5000 安全漏洞 — EDS5000 series CWE-78 9.8 Critical 2026-03-11
CVE-2025-67035 Lantronix EDS5000 安全漏洞 — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67041 Lantronix EDS3000PS 安全漏洞 — EDS3000PS series CWE-78 7.2 High 2026-03-11
CVE-2025-7766 Lantronix Provisioning Manager 代码问题漏洞 — Provisioning Manager CWE-611 8.0 High 2025-07-22
CVE-2025-4338 Lantronix Device installer 代码问题漏洞 — Device Installer CWE-611 6.8 Medium 2025-05-22
CVE-2025-2567 Lantronix Xport 访问控制错误漏洞 — Xport CWE-306 9.8 Critical 2025-04-15
CVE-2023-7237 Lantronix Xport 加密问题漏洞 — XPort CWE-261 5.7 Medium 2024-01-23

本页汇总了 Lantronix 厂商截至目前公开的全部 25 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。