CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-06-23. EPSS: 20% chance of exploitation in the next 30 days.

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.

Affected products

• Lantronix e213f102s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e214f002s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e214f00cs Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e214g000s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e214g001s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e218f004s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e218g107s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e228g002s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e228g004s Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e228g00cb28 Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix e228g00cs Firmware: before 3.21.0.0R1 (fixed in 3.21.0.0R1)
• Lantronix EDS5008 Firmware: before 2.2.0.0r1 (fixed in 2.2.0.0r1)
• Lantronix EDS5016 Firmware: before 2.2.0.0r1 (fixed in 2.2.0.0r1)
• Lantronix EDS5032 Firmware: before 2.2.0.0r1 (fixed in 2.2.0.0r1)
• Lantronix g526gp12s Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g526gp17s Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g526gp1as Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g526gp1asg Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g526gp1cs Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g527gp22s Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g527gp27s Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g527gp2as Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g527gp2asg Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g528gp2fs Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• Lantronix g528gp2fsg Firmware: before 2.6.0.4R6 (fixed in 2.6.0.4R6)
• and 8 more

Published 2026-03-11. Last modified 2026-09-08.