CVE-2025-67038
Estado: AnalizadaCrítica (9.3)⚠ Explotación activa
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 19%
- Percentil entre todas las CVEs puntuadas: 97
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
CISA KEV — explotada activamente
- Añadida al catálogo: 23/6/2026
- Plazo de remediación: 26/6/2026
- Uso conocido en ransomware: Unknown
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1190Exploit Public-Facing Applicationinitial access95 % - Impacto principal
T1059Command and Scripting Interpreterexecution95 % - Impacto secundario
T1078Valid Accountsstealth · persistence · privilege escalation · initial access75 %
Aplicación expuesta en red sin autenticación previa (AV:N, PR:N, UI:N). Inyección de comandos OS en parámetro username sin sanitización, ejecutados como root. CWE-78 confirma ejecución de comandos arbitrarios.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (33)
Lantronix — E213f102s FirmwareLantronix — E214f002s FirmwareLantronix — E214f00cs FirmwareLantronix — E214g000s FirmwareLantronix — E214g001s FirmwareLantronix — E218f004s FirmwareLantronix — E218g107s FirmwareLantronix — E228g002s FirmwareLantronix — E228g004s FirmwareLantronix — E228g00cb28 FirmwareLantronix — E228g00cs FirmwareLantronix — Eds5008 FirmwareLantronix — Eds5016 FirmwareLantronix — Eds5032 FirmwareLantronix — G526gp12s FirmwareLantronix — G526gp17s FirmwareLantronix — G526gp1as FirmwareLantronix — G526gp1asg FirmwareLantronix — G526gp1cs FirmwareLantronix — G527gp22s FirmwareLantronix — G527gp27s FirmwareLantronix — G527gp2as FirmwareLantronix — G527gp2asg FirmwareLantronix — G528gp2fs FirmwareLantronix — G528gp2fsg FirmwareLantronix — G528gp2fsgc FirmwareLantronix — X300f202s FirmwareLantronix — X303f202s FirmwareLantronix — X304g000s FirmwareLantronix — X304g002s FirmwareLantronix — X304g007s FirmwareLantronix — X304g00as FirmwareLantronix — X304g00cs Firmware
CWE
- CWE-78
Referencias
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
- https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-67038
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-67038",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-67038",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "active"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-06-24T03:55:55.997634Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "NOT_DEFINED",
"baseScore": 9.3,
"Automatable": "NOT_DEFINED",
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "ics-cert@hq.dhs.gov",
"affectedData": [
{
"vendor": "Lantronix",
"product": "EDS5000 series",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "2.1.0.0R3"
},
{
"status": "unaffected",
"version": "2.2.0.0R1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "G520 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.6.0.4R6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "X300 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "2.6.0.4R6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2.6.0.4R6"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "E210 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.21.0.0R1"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Lantronix",
"product": "E220 series",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "3.21.0.0R1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "3.21.0.0R1"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2026-03-11T17:16:52.010",
"references": [
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json",
"tags": [
"Third Party Advisory"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw",
"tags": [
"Vendor Advisory"
],
"source": "ics-cert@hq.dhs.gov"
},
{
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-67038",
"tags": [
"US Government Resource"
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "ics-cert@hq.dhs.gov",
"description": [
{
"lang": "en",
"value": "CWE-78"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges."
},
{
"lang": "es",
"value": "Se descubrió un problema en Lantronix EDS5000 2.1.0.0R3. El módulo HTTP RPC ejecuta un comando de shell para escribir registros cuando la autenticación del usuario falla. El nombre de usuario se concatena directamente con el comando sin ninguna sanitización. Esto permite a los atacantes inyectar comandos arbitrarios del sistema operativo en el parámetro de nombre de usuario. Los comandos inyectados se ejecutan con privilegios de root."
}
],
"lastModified": "2026-09-08T19:00:57.803",
"cisaActionDue": "2026-06-26",
"cisaExploitAdd": "2026-06-23",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:eds5008_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDC10A13-2BF7-4FEC-8B00-02B431487CF1",
"versionEndExcluding": "2.2.0.0r1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:eds5008:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B983DA3B-63DC-4981-A671-66A674234E80"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:eds5016_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46DEC900-2A5A-4EED-979F-CDD04D1F54CC",
"versionEndExcluding": "2.2.0.0r1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:eds5016:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "86808903-C99D-4C74-A1D2-3E708B2074D8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:eds5032_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF17EE12-1958-4675-A6EE-69ABE7A491BB",
"versionEndExcluding": "2.2.0.0r1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:eds5032:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "04B4C755-3690-44B1-900A-71C5BEB4A1C0"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g526gp12s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E15DE308-CC7F-4A2B-B071-57A6EAF20AC9",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g526gp12s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B2FC782A-947A-4255-88D3-BB681FAB8C33"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g526gp17s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D60E616D-4C85-46F3-A06A-CFAC7844F49E",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g526gp17s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C3B3860C-918C-405A-BFF4-E5E8B1885FD4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g526gp1cs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB60C2F3-72AB-43CB-A48A-5E95BB0224E0",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g526gp1cs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FF7995A1-5D60-4BE6-86A9-BE0168967542"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g526gp1asg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D06661A-7FDB-4FD4-9D06-944FA6567130",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g526gp1asg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "AFAF2B6A-ACAA-41E6-B6FF-E66962E52E8F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g526gp1as_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79CFC178-1385-4DA4-8D60-1E9D00C93059",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g526gp1as:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3FD44769-1682-4285-80CB-C40CB915186A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g527gp22s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E5D215D-0B81-424E-A34C-DA0B705C22D0",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g527gp22s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "17C63B3F-54D1-4846-9B61-921FED607810"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g527gp27s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69ADD908-7FB1-48FB-BC2D-97535D67BCD7",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g527gp27s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4965BFC5-4FC9-460C-BD62-8C86065D79FC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g527gp2as_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D553901-C726-4C64-9430-4CC1FC315BBA",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g527gp2as:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D14DCF95-4FC1-4BC2-9073-FB8C841FB162"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g527gp2asg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E590171-3331-46A3-96F7-1FFC866D371E",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g527gp2asg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CA00D1B6-9C02-4E9C-8F18-8CA884F77D32"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g528gp2fs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "572C93F5-4F64-4E66-95EC-0A82481ACC02",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g528gp2fs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "83C90862-D6DA-419D-8C6E-DDAA9988A79B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g528gp2fsg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A5BFD76-0B4B-4393-BD74-A759CB1077F8",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g528gp2fsg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "39CE6346-B54E-49EA-AA14-10AB4041FE41"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:g528gp2fsgc_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EB835452-0C0D-43E5-B408-B4A5BAED2F91",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:g528gp2fsgc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "37728902-DED8-4DF7-9A47-AF741E711459"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x300f202s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB2B2E26-2AE0-419F-9A59-D2F9443255BD",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x300f202s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "956530DC-33CE-495E-8567-55F08BA34E73"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x303f202s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F37DBE82-3C7A-45EC-B4A6-77472E3D7C5F",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x303f202s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C15669B7-D81E-46E5-9347-00A2CA2DF8BF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x304g00as_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "359A0647-4FCC-4CF6-8849-5C7BB4C949F4",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x304g00as:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8D98E843-3722-43EA-808D-F28024FF6578"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x304g000s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "773C57B9-4FC6-4BD9-99B5-9083087EE13E",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x304g000s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0D514FCD-422A-491D-B01A-B2BE3C58FEF4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x304g002s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C51D9FE9-8D80-4203-A4C6-EEA3DA0A39E7",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x304g002s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "860EE78D-1577-4481-9725-5592DB4FA572"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x304g007s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A88546F-80C9-44A7-B548-7C0F2211056F",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x304g007s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "542FBE66-B2A1-4372-8BFD-FC41EA10611F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:x304g00cs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B8D994B-2CBB-47DB-A2D5-69CA9DEEF8CE",
"versionEndExcluding": "2.6.0.4R6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:x304g00cs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71CA005B-E051-4FA2-A687-06ABDDAC6FBF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e228g002s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C13EE147-E380-4C71-A946-405663F96A8F",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e228g002s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "48029A44-5387-4E95-A9BD-4C26781DCD5F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e228g004s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "403BC388-71EF-4D90-96B8-8B096D9B6BDA",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e228g004s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD86AE4D-7094-4C07-9281-C03220898DD6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e228g00cb28_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E65362F7-252E-4F89-9586-6226B05D3594",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e228g00cb28:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "26975D89-ACDA-443C-B96C-D7262C2B8453"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e228g00cs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B52D569-2478-4366-84B2-29A744C8A2B9",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e228g00cs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2D2E7FF0-4A37-4346-B998-7390DD9FE2E9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e213f102s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95AFDC57-BFA9-472D-967D-2E1D35F57374",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e213f102s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F24DCD1B-EC5B-463A-91C7-412048149638"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e214f002s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B470D100-E126-4FD9-8C4C-E2BE3E22DF7C",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e214f002s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C63831C0-114C-4D50-B66B-1D86151D5B73"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e214f00cs_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2A07741-84F3-4996-B84D-4AE129D93AE9",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e214f00cs:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "62EDE924-DBF0-4B4F-B038-6DA77E757552"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e214g000s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F36ABAB-CC23-42BB-9EAD-02E4B42B2A26",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e214g000s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9BD386AD-4FE0-4F98-B3EF-33C37526A37C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e214g001s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5A5179D-8C42-484E-B1DA-C61FB0C7ACC7",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e214g001s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C1712DF7-8D37-458E-9C3B-23200222FC8C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e218f004s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "123BA30C-4734-4A00-825C-3293D155F3AA",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e218f004s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B0302237-3BFD-44AB-B04D-94076D93EDF1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lantronix:e218g107s_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2DB03D2-4AE2-4E9D-A941-4A65E91A3E29",
"versionEndExcluding": "3.21.0.0R1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lantronix:e218g107s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "47F18F2A-BB78-4565-90FF-2F090ED4637D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "ics-cert@hq.dhs.gov",
"cisaRequiredAction": "Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",
"cisaVulnerabilityName": "Lantronix EDS5000 Code Injection Vulnerability"
}