Lantronix: >> Eds5008 Firmware >> 2.1.0.0 Security Vulnerabilities
An issue was discovered in Lantronix EDS5000 2.1.0.0R3. An authenticated attacker can inject OS commands into the "tunnel" parameter when killing a tunnel connection. Injected commands are executed with root privileges.
CVSS Score
8.8
EPSS Score
0.004
Published
2026-03-11