Home

Description

An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.

PUBLISHED Reserved 2025-12-08 | Published 2026-03-11 | Updated 2026-03-12 | Assigner mitre

References

lantronix.com

eds3000ps.com

www.cisa.gov/news-events/ics-advisories/icsa-26-069-02

cve.org (CVE-2025-67039)

nvd.nist.gov (CVE-2025-67039)

Download JSON