CVE-2026-80151: Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download

Published Sep 22, 2026
·
Updated

Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.

Affected Software

6 affected components
Lantronix SLC8000<9.7.0.3
Lantronix EMG8500<9.7.0.1
Lantronix EMG7500<9.7.0.1
Lantronix SLB882
Lantronix SLCx-03
Lantronix SLCx-02

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Lantronix SLC8000 to a version that resolves this vulnerability.

    Fixed in 9.7.0.3
  2. Upgrade

    Upgrade Lantronix EMG8500/EMG7500 to a version that resolves this vulnerability.

    Fixed in 9.7.0.1

Event History

Sep 22, 2026
CVE Published
via MITRE·03:21 PM
Data Sourced
via MITRE·03:21 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:18 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What level of access does an attacker need to exploit this issue?

An attacker must be able to authenticate to the affected device's terminal or CLI interface with the services permission. No user interaction is required after the attacker has that access.

2

Which devices have a firmware update identified in the available information?

SLC8000 devices are affected before firmware v9.7.0.3, and EMG8500 and EMG7500 devices are affected before firmware v9.7.0.1. All firmware versions of SLB882, SLCx-03, and SLCx-02 are affected according to the provided information.

3

What is the impact if exploitation succeeds?

The attacker can execute arbitrary shell commands as root on the device, resulting in complete compromise of confidentiality, integrity, and availability. Downstream serial-attached devices may also be affected.

4

How can administrators identify potentially affected systems?

Identify Lantronix devices in the listed product families and compare their installed firmware against the stated fixed versions for SLC8000, EMG8500, and EMG7500. Treat SLB882, SLCx-03, and SLCx-02 as affected regardless of firmware version.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203