Vulnerability Details CVE-2025-70082
The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 37.3%
CVSS Severity
CVSS v3 Score 2.7
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-069-02.json
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02
- https://www.lantronix.com/technical-support/security-updates/vulnerability-disclosure-policy/vulnerability-library/?_gl=16c8bez_upMQ.._gaMzQwNjk5ODI5LjE3ODI5MTM3NTk._ga_M2G6RLT5L3*czE3ODI5MTM3NTgkbzEkZzAkdDE3ODI5MTM3NTgkajYwJGwwJGgw
Products affected by CVE-2025-70082
-
cpe:2.3:h:lantronix:eds3008ps1ns:-
-
cpe:2.3:h:lantronix:eds3016ps1ns:-
-
cpe:2.3:o:lantronix:eds3008ps1ns_firmware:3.1.0.0r2
-
cpe:2.3:o:lantronix:eds3016ps1ns_firmware:3.1.0.0r2