OS command injection in Lantronix Eds5008 Firmware
CVSS Skor
9.8
EPSS İhtimal
%20.0
Risk Skoru
3.9
Yayın
7 ay önce
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Envanterimdeki Etkisi
Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.
Oturum kontrol ediliyor…
Zafiyet Açıklaması
DayBreach CVE AI Araştırması
CVE-2025-67038 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write logs when user's authentication fails. The username is directly concatenated with the command without any sanitization. This allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.
IMPACT — Etkilenen Ürünler ve Yazılımlar
Affected Products
The following products are affected by CVE-2025-67038 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.
| ID | VENDOR | PRODUCT | ACTION |
|---|---|---|---|
| 1 | lantronix | eds5008 firmware | İncele |
| 2 | lantronix | eds5008 | İncele |
| 3 | lantronix | eds5016 firmware | İncele |
| 4 | lantronix | eds5016 | İncele |
| 5 | lantronix | eds5032 firmware | İncele |
| 6 | lantronix | eds5032 | İncele |
| 7 | lantronix | g526gp12s firmware | İncele |
| 8 | lantronix | g526gp12s | İncele |
| 9 | lantronix | g526gp17s firmware | İncele |
| 10 | lantronix | g526gp17s | İncele |
| 11 | lantronix | g526gp1cs firmware | İncele |
| 12 | lantronix | g526gp1cs | İncele |
| 13 | lantronix | g526gp1asg firmware | İncele |
| 14 | lantronix | g526gp1asg | İncele |
| 15 | lantronix | g526gp1as firmware | İncele |
| 16 | lantronix | g526gp1as | İncele |
| 17 | lantronix | g527gp22s firmware | İncele |
| 18 | lantronix | g527gp22s | İncele |
| 19 | lantronix | g527gp27s firmware | İncele |
| 20 | lantronix | g527gp27s | İncele |
| 21 | lantronix | g527gp2as firmware | İncele |
| 22 | lantronix | g527gp2as | İncele |
| 23 | lantronix | g527gp2asg firmware | İncele |
| 24 | lantronix | g527gp2asg | İncele |
| 25 | lantronix | g528gp2fs firmware | İncele |
| 26 | lantronix | g528gp2fs | İncele |
| 27 | lantronix | g528gp2fsg firmware | İncele |
| 28 | lantronix | g528gp2fsg | İncele |
| 29 | lantronix | g528gp2fsgc firmware | İncele |
| 30 | lantronix | g528gp2fsgc | İncele |
| 31 | lantronix | x300f202s firmware | İncele |
| 32 | lantronix | x300f202s | İncele |
| 33 | lantronix | x303f202s firmware | İncele |
| 34 | lantronix | x303f202s | İncele |
| 35 | lantronix | x304g00as firmware | İncele |
| 36 | lantronix | x304g00as | İncele |
| 37 | lantronix | x304g000s firmware | İncele |
| 38 | lantronix | x304g000s | İncele |
| 39 | lantronix | x304g002s firmware | İncele |
| 40 | lantronix | x304g002s | İncele |
| 41 | lantronix | x304g007s firmware | İncele |
| 42 | lantronix | x304g007s | İncele |
| 43 | lantronix | x304g00cs firmware | İncele |
| 44 | lantronix | x304g00cs | İncele |
| 45 | lantronix | e228g002s firmware | İncele |
| 46 | lantronix | e228g002s | İncele |
| 47 | lantronix | e228g004s firmware | İncele |
| 48 | lantronix | e228g004s | İncele |
| 49 | lantronix | e228g00cb28 firmware | İncele |
| 50 | lantronix | e228g00cb28 | İncele |
| 51 | lantronix | e228g00cs firmware | İncele |
| 52 | lantronix | e228g00cs | İncele |
| 53 | lantronix | e213f102s firmware | İncele |
| 54 | lantronix | e213f102s | İncele |
| 55 | lantronix | e214f002s firmware | İncele |
| 56 | lantronix | e214f002s | İncele |
| 57 | lantronix | e214f00cs firmware | İncele |
| 58 | lantronix | e214f00cs | İncele |
| 59 | lantronix | e214g000s firmware | İncele |
| 60 | lantronix | e214g000s | İncele |
| 61 | lantronix | e214g001s firmware | İncele |
| 62 | lantronix | e214g001s | İncele |
| 63 | lantronix | e218f004s firmware | İncele |
| 64 | lantronix | e218f004s | İncele |
| 65 | lantronix | e218g107s firmware | İncele |
| 66 | lantronix | e218g107s | İncele |
| 67 | lantronix | EDS5000 | İncele |
RED HAT CSAF/VEX — Ürün Etki Kontrolü
SCORING — CVSS Çoklu Kaynak Skoru
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.
| SCORE | VERSION | SEVERITY | VECTOR | SOURCE |
|---|---|---|---|---|
| 9.8 | CVSS V31 | CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | NVD |
| 9.3 | CVSS V40 | CRITICAL | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD |
Yama ve İyileştirme Rehberi (Solution)
Solution & Remediation Advisory
Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Public exploit ve aktif sömürü durumu
Doğrulanmış exploit istihbaratı
Bu CVE CISA KEV kataloğunda aktif sömürülen olarak işaretli; ancak henüz doğrulanmış, indirilebilir bir public PoC veya Metasploit modülü bulunamadı. Aktif sömürü kanıtı public exploit kodu bulunduğu anlamına gelmez.
Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)
CWE - Common Weakness Enumeration
While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2025-67038 is associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2025-67038 weaknesses.
Saldırı Vektörü ve Erişilebilirlik Karakteristiği
Resmi Kaynaklar ve Danışma Bültenleri
CVSS Vektör Radar Grafiği
9.8 / 10Vulnerability Scoring Details
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HGeçici çözüm
Zafiyet Türü (CWE & CAPEC)
İlgili Benzer Açıklar
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2025-67038"