CVE-2025-67041: Lantronix EDS3000PS OS Command Injection
Published Mar 11, 2026
·Updated
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.
Affected Software
5 affected components
Lantronix EDS3000PS
All of the following
Lantronix Eds3016ps1ns Firmware=3.1.0.0r2
Lantronix Eds3016ps1ns
All of the following
Lantronix Eds3008ps1ns Firmware=3.1.0.0r2
Lantronix Eds3008ps1ns
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lantronix EDS3000PSto a version that resolves this vulnerability.Fixed in 3.2.0.0R2 - Configuration
Update Lantronix EDS3000PS firmware so that the host parameter of the TFTP client in the Filesystem Browser page is properly sanitized to prevent OS command injection with root privileges.
EDS3000PS Filesystem Browser page (TFTP client) host parameter sanitization = properly sanitized
Event History
Mar 11, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software