Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Lantronix — Vulnerabilities & Security Advisories 28

Browse all 28 CVE security advisories affecting Lantronix. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Lantronix specializes in IoT device management and secure connectivity solutions, enabling industrial and enterprise systems to communicate across networks. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and default configurations. While no major public security incidents have been widely documented, the four CVEs on record highlight persistent issues in access control and secure coding practices. Their devices typically require network segmentation and immediate patching to mitigate risks, as unpatched implementations could provide attackers with entry points into critical infrastructure.

CVE ID Title CVSS Severity Published
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 — XPress-DR CWE-306 9.8 Critical 2026-10-14
CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature — G520 Series CWE-347 7.5 High 2026-09-29
CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting — G520 Series CWE-79 7.5 High 2026-09-29
CVE-2026-80156 Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass — SLC8000 CWE-22 9.1 Critical 2026-09-22
CVE-2026-80155 Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation — SLC8000 CWE-22 10.0 Critical 2026-09-22
CVE-2026-80154 Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass — SLC8000 CWE-330 9.6 Critical 2026-09-22
CVE-2026-80152 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80151 Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80150 Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter — SLC8000 CWE-918 7.5 High 2026-09-22
CVE-2026-80149 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter — SLC8000 CWE-918 8.6 High 2026-09-22
CVE-2026-80148 Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation — SLC8000 CWE-918 8.6 High 2026-09-22
CVE-2026-80147 Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write — SLC8000 CWE-121 9.9 Critical 2026-09-22
CVE-2026-80146 Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read — SLC8000 CWE-121 9.9 Critical 2026-09-22
CVE-2026-80145 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password — SLC8000 CWE-78 9.1 Critical 2026-09-22
CVE-2026-80144 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write — SLC8000 CWE-78 9.9 Critical 2026-09-22
CVE-2026-80143 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read — SLC8000 CWE-78 9.9 Critical 2026-09-22
CVE-2025-70082 Lantronix EDS3000PS Unverified Password Change — EDS3000PS series CWE-620 2.7 Low 2026-03-11
CVE-2025-67039 Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel — EDS3000PS series CWE-288 9.8 Critical 2026-03-11
CVE-2025-67037 Lantronix EDS5000, G520, and X300 OS Command Injection — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67036 Lantronix EDS5000, G520, and X300 OS Command Injection — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67034 Lantronix EDS5000, G520, and X300 OS Command Injection — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67038 Lantronix EDS5000, G520, and X300 OS Command Injection — EDS5000 series CWE-78 9.8 Critical 2026-03-11
CVE-2025-67035 Lantronix EDS5000 OS Command Injection — EDS5000 series CWE-78 7.2 High 2026-03-11
CVE-2025-67041 Lantronix EDS3000PS OS Command Injection — EDS3000PS series CWE-78 7.2 High 2026-03-11
CVE-2025-7766 Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference — Provisioning Manager CWE-611 8.0 High 2025-07-22
CVE-2025-4338 Lantronix Device Installer Improper Restriction of XML External Entity Reference — Device Installer CWE-611 6.8 Medium 2025-05-22
CVE-2025-2567 Lantronix Xport Missing Authentication for Critical Function — Xport CWE-306 9.8 Critical 2025-04-15
CVE-2023-7237 Lantronix XPort Weak Encoding for Password — XPort CWE-261 5.7 Medium 2024-01-23

This page lists every published CVE security advisory associated with Lantronix. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.