THREATOPS
THREAT OPSThreat News › [0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities

[0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities

lowfulldisclosurePublished 2026-09-04

<p>Posted by disclosure via Fulldisclosure on Sep 03</p>0day Rubbish Research Team is publicly disclosing two vulnerabilities in Lantronix EDS3000PR 3.2.0.0R2.<br /> <br /> Vulnerability 1 — Authenticated command injection to root RCE in FsUnmount (CVSS 8.8, <br /> CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78)<br /> <br /> Lantronix EDS3000PR is an industrial serial device server (CII/OT).

MITRE ATT&CK techniques

Original source: https://seclists.org/fulldisclosure/2026/Sep/6