CVE-2025-67039 describes an authentication bypass vulnerability in Lantronix EDS3000PS 3.1.0.0R2. The flaw allows attackers to bypass authentication on management pages by appending a crafted suffix to the URL and including an Authorization header using "admin" as the username. This vulnerability is classified under CWE-288 (Authentication Bypass) and has a CVSS 3.1 base score of 9.1, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality and integrity impact. No patch or remediation information is provided, and no known exploits are reported in the wild.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls on management pages, potentially leading to unauthorized administrative access. This compromises confidentiality and integrity of the device management interface. Availability impact is not indicated. The vulnerability poses a critical risk due to the ease of exploitation and the sensitive nature of management functions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the management interface to trusted users only and monitor for suspicious access patterns. Avoid exposing management interfaces directly to untrusted networks.