This vulnerability affects Lantronix EDS5000 version 2.1.0.0 and involves an authenticated OS command injection via the "name" parameter in the SSL credential deletion functionality of the management interface. The flaw allows attackers with valid credentials to execute arbitrary commands as root, leading to complete control over the affected device. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability. No patch or vendor advisory information is provided, and no known exploits in the wild have been reported.

Successful exploitation grants an authenticated attacker root-level command execution on the device, enabling full system compromise including data theft, service disruption, or further network pivoting. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the management interface to trusted users only and monitor for suspicious activity. Avoid using vulnerable versions in production environments if possible.