Lantronix EDS5032 Firmware vulnerabilities

5 CVEs affecting Lantronix EDS5032 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-67038, published 2026-03-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-67038: Lantronix EDS5000 Code Injection Vulnerability, published 2026-03-11. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2026-06-23. EPSS: 20% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the…
CVE-2025-67034, published 2026-03-11. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "name" parameter when deleting SSL credentials through the management interface.…
CVE-2025-67035, published 2026-03-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The SSH Client and SSH Server pages are affected by multiple OS injection vulnerabilities due to missing sanitization of input parameters. An…
CVE-2025-67037, published 2026-03-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected commands are executed…
CVE-2025-67036, published 2026-03-11. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an…