Lantronix EDS3016PS1NS Firmware vulnerabilities

3 CVEs affecting Lantronix EDS3016PS1NS Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-70082, published 2026-03-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-70082, published 2026-03-11. Low severity, CVSS 2.7. EPSS: 0.5% chance of exploitation in the next 30 days. The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify…
CVE-2025-67039, published 2026-03-11. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that…
CVE-2025-67041, published 2026-03-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the…