Lantronix: >> Eds3016ps1ns Firmware Security Vulnerabilities
The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.
CVSS Score
5.1
EPSS Score
0.005
Published
2026-03-11
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.
CVSS Score
9.3
EPSS Score
0.004
Published
2026-03-11
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The host parameter of the TFTP client in the Filesystem Browser page is not properly sanitized. This can be exploited to escape from the original command and execute an arbitrary one with root privileges.
CVSS Score
8.6
EPSS Score
0.004
Published
2026-03-11