Threats tagged 'ghsa-w5v7-rqrc-ccv2'

Lantronix EDS5000 version 2.1.0.0R3 contains a command injection vulnerability in the handling of the "tunnel" parameter when an authenticated user attempts to kill a tunnel connection. This flaw allows execution of arbitrary OS commands with root privileges, posing a high risk to system confidentiality, integrity, and availability.