Lantronix SLC8000 and related devices contain an SSRF vulnerability (CVE-2026-80148) in the WebSSH/WebTelnet listener component. The vulnerability is due to a snprintf call that constructs the SSH connection target using user input without proper bounds checking. By supplying an overlong username string, an attacker can truncate the device IP suffix and redirect the SSH connection to an arbitrary host controlled by the attacker. This allows unauthenticated attackers to cause the device to initiate SSH connections to arbitrary endpoints, potentially enabling internal network reconnaissance or communication with otherwise inaccessible hosts. Affected devices include SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before v9.7.0.1, and all firmware versions of SLB882. The vulnerability has a CVSS 4.0 base score of 7.7 (high severity). No official patch or remediation information is provided in the data.

An unauthenticated attacker can exploit this SSRF vulnerability to force affected Lantronix devices to initiate SSH connections to arbitrary attacker-controlled endpoints. This could be used to enumerate or communicate with internal network resources that are otherwise inaccessible, potentially aiding further attacks or reconnaissance. The vulnerability does not require user interaction or privileges and has a high severity score, indicating significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the WebSSH/WebTelnet listener interfaces to trusted networks only to reduce exposure. Monitor network traffic for unusual SSH connection attempts originating from these devices. Avoid exposing these devices directly to untrusted networks.