CVE-2025-70082
Received Received - Intake
Arbitrary Code Execution in Lantronix EDS3000PS ltrx_evo Component

Publication date: 2026-03-11

Last updated on: 2026-03-19

Assigner: MITRE

Description
An issue in Lantronix EDS3000PS v.3.1.0.0R2 allows an attacker to execute arbitrary code and obtain sensitive information via the ltrx_evo component
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-11
Last Modified
2026-03-19
Generated
2026-05-07
AI Q&A
2026-03-11
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
lantronix eds3016ps1ns_firmware 3.1.0.0
lantronix eds3008ps1ns_firmware 3.1.0.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-288 The product requires authentication, but the product has an alternate path or channel that does not require authentication.
CWE-620 When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in Lantronix EDS3000PS version 3.1.0.0R2, specifically in the ltrx_evo component. It allows an attacker to execute arbitrary code and obtain sensitive information.


How can this vulnerability impact me? :

An attacker exploiting this vulnerability could run unauthorized code on the affected device and access sensitive information, potentially compromising the security and integrity of your system.


How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart