CVE-2026-80143: Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc eeprom read command that passes unsanitized user input to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Lantronix SLC8000to a version that resolves this vulnerability.Fixed in 9.7.0.2 - Upgrade
Upgrade
Lantronix EMG8500/EMG7500to a version that resolves this vulnerability.Fixed in 9.7.0.1
Event History
Frequently Asked Questions
Which devices have a firmware fix available, and which remain affected regardless of version?
SLC8000 devices are affected before firmware 9.7.0.2, while EMG8500 and EMG7500 devices are affected before firmware 9.7.0.1. All firmware versions of SLB882, SLCx-03, and SLCx-02 are affected.
What access does an attacker need to exploit this issue?
An attacker must authenticate to the device's terminal or CLI interface as any user. No additional privileges or user interaction are required.
What is the impact after successful exploitation?
The attacker can execute arbitrary shell commands as root on the affected device, resulting in complete compromise of confidentiality, integrity, and availability. Downstream devices attached over serial connections may also be impacted.
How can defenders identify exposure?
Identify whether the device is one of the listed models and compare its installed firmware against the affected version ranges. Devices that permit authenticated terminal or CLI access are exposed to exploitation through the undocumented mfc eeprom read command.