Threats tagged 'ghsa-fx2j-qf8p-f9ph'

Lantronix EDS5000 version 2.1.0.0R3 contains a command injection vulnerability in the management interface. An authenticated attacker can inject operating system commands via the "name" parameter when deleting SSL credentials. These commands execute with root privileges, potentially allowing full system compromise. The vulnerability has a high severity score of 8.8 (CVSS 3.1). No patch or remediation information is currently provided.