Threats tagged 'ghsa-55gq-23mv-cw8r'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	KEVEPSS 20%	CVE-2025-67038Lantronix EDS5000 · OS Command Injection Critical9.8KEVEPSS 20%2026-03-11GCVE DatabaseCVE-2025-67038 Lantronix EDS5000 version 2.1.0.0R3 contains a critical vulnerability in its HTTP RPC module where the username parameter is concatenated directly into a shell command without sanitization. This allows an attacker to inject arbitrary operating system commands that execute with root privileges, potentially leading to full system compromise. KEVEPSS 20%Report on CVE-2025-67038 Vulnerability CWE-78 #ghsa-55gq-23mv-cw8r	GCVE Database	2026-03-11

Page 1 of 1