← Vulnerability feed

Vulnerability record · CVE-2025-70082 · published 11 March 2026

CVE-2025-70082: Lantronix eds3016ps1ns firmware os command injection vulnerability

Lantronix · Eds3016ps1ns Firmware

The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

5.1 CVSS 4.0 Medium EPSS 0.46% · top 62.7% CWE-620 · CWE-620CWE-78 · OS command injection
5.1CVSS 4.0 base score
0.46%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
3References
4 Sep 2026Last modified by NVD

Description

The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02 Third Party AdvisoryUS Government Resource
https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=

Track CVE-2025-70082 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2025-67039Lantronix eds3016ps1ns firmware authentication bypass via alternate path vulnerabilityAn issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to th…EPSS 0.44%8.6CVE-2025-67041Lantronix eds3016ps1ns firmware os command injection vulnerabilityAn issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly saniti…EPSS 0.42%

Source: NIST National Vulnerability Database (record CVE-2025-70082), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.