THREAT OPS › Threat News › [0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities
[0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities
<p>Posted by disclosure via Fulldisclosure on Sep 03</p>0day Rubbish Research Team is publicly disclosing two vulnerabilities in Lantronix EDS3000PR 3.2.0.0R2.<br /> <br /> Vulnerability 1 — Authenticated command injection to root RCE in FsUnmount (CVSS 8.8, <br /> CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78)<br /> <br /> Lantronix EDS3000PR is an industrial serial device server (CII/OT).
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Original source: https://seclists.org/fulldisclosure/2026/Sep/6