Threats tagged 'ghsa-j94v-49mv-xq4h'

Lantronix EDS5000 version 2.1.0.0R3 contains a vulnerability in its Log Info page where authenticated users can specify log file names without proper sanitization. This flaw allows command injection, enabling execution of arbitrary OS commands with root privileges. The vulnerability is identified as CVE-2025-67036 and has a high severity score of 8.8. No patch or remediation information is currently available.