THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-67036 (HIGH 7.2) — An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root priv

[NVD] CVE-2025-67036 (HIGH 7.2) — An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root priv

lownvdPublished 2026-03-11

CVE-2025-67036 CVSS: 7.2 HIGH Published: 2026-03-11T17:16:51.790

An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The Log Info page allows users to see log files by specifying their names. Due to a missing sanitization in the file name parameter, an authenticated attacker can inject arbitrary OS commands that are executed with root privileges.

Indicators of compromise

CVE-2025-67036cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-67036