CVE-2026-80146: Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

Published Sep 22, 2026
·
Updated

Lantronix SLC8000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc eeprom read command that copies unbounded user input into a bounded stack buffer before passing it to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and supply an oversized input to trigger the overflow, potentially achieving complete loss of confidentiality, integrity, and availability on the affected device and impacting downstream serial-attached devices.

Affected Software

6 affected components
Lantronix SLC8000<9.7.0.2
Lantronix EMG8500<9.7.0.1
Lantronix EMG7500<9.7.0.1
Lantronix SLB882
Lantronix SLCx-03
Lantronix SLCx-02

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Lantronix SLC8000 to a version that resolves this vulnerability.

    Fixed in 9.7.0.2
  2. Upgrade

    Upgrade Lantronix EMG8500/EMG7500 to a version that resolves this vulnerability.

    Fixed in 9.7.0.1

Event History

Sep 22, 2026
CVE Published
via MITRE·03:19 PM
Data Sourced
via MITRE·03:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 PM
DescriptionSeverityWeakness
Dec 5, 58695
Event
via NVD·05:05 PM

Frequently Asked Questions

1

Which devices can be remediated with a firmware update, and which remain affected regardless of version?

SLC8000 devices are affected before firmware 9.7.0.2, while EMG8500 and EMG7500 devices are affected before firmware 9.7.0.1. All firmware versions of SLB882, SLCx-03, and SLCx-02 are affected.

2

What access does an attacker need to exploit this issue?

An attacker must authenticate as any user to the device terminal or CLI interface. No elevated privilege is stated as necessary; the vulnerable command accepts oversized user input after authentication.

3

What systems could be affected beyond the Lantronix device itself?

Successful exploitation may allow arbitrary code execution and complete compromise of the affected device's confidentiality, integrity, and availability. The impact can also extend to downstream devices attached through serial connections.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203