Threats tagged 'ghsa-cfv5-944v-wgjm'

Lantronix EDS3000PS version 3.1.0.0R2 contains an authentication bypass vulnerability that allows unauthorized access to management pages. This bypass is achieved by appending a specific suffix to the URL and sending an Authorization header with the username "admin". The vulnerability has a critical severity with a CVSS score of 9.1, indicating high impact on confidentiality and integrity without requiring user interaction or privileges.