LANTRONIX kayıtları
lantronix üreticisine ait 43 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %2,3
- Silahlaştırılmış
- 1 · %2,3
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 104 gün
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')17
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7
- CWE-121 Stack-based Buffer Overflow5
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
43 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
73Bu hafta | CVE-2025-67038Silahlaştırılmış | Lantronix EDS5000, G520, and X300 OS Command Injectionlantronix · eds5008 firmware · CWE-78 | Kritik9,3 | KEV | %20,2 | 11 Mar 2026 |
50Planlayın | CVE-2021-21881Kavram kanıtı | An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,9 | — | %36,9 | 22 Ara 2021 |
48Planlayın | CVE-2021-21892İstismar yok | A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QElantronix · premierwave 2050 firmware · CWE-121 | Kritik9,9 | — | %30,4 | 22 Ara 2021 |
42Planlayın | CVE-2014-9002İstismar yok | Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c paralantronix · xprintserver · CWE-264 | Kritik10,0 | — | %5,0 | 20 Kas 2014 |
41Planlayın | CVE-2021-21872İstismar yok | An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0Rlantronix · premierwave 2050 firmware · CWE-78 | Kritik9,9 | — | %6,0 | 22 Ara 2021 |
41Planlayın | CVE-2021-21883İstismar yok | An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,9 | — | %6,0 | 22 Ara 2021 |
40Planlayın | CVE-2021-21889İstismar yok | A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).lantronix · premierwave 2050 firmware · CWE-121 | Kritik9,9 | — | %2,9 | 22 Ara 2021 |
40Planlayın | CVE-2016-4325İstismar yok | Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root accesslantronix · xprintserver firmware · CWE-255 | Kritik9,8 | — | %2,4 | 14 May 2016 |
39İzleyin | CVE-2018-12925İstismar yok | Baseon Lantronix MSS devices do not require a password for TELNET access.lantronix · mss firmware · CWE-521 | Kritik9,8 | — | %1,4 | 28 Haz 2018 |
38İzleyin | CVE-2021-21884İstismar yok | An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %5,2 | 22 Ara 2021 |
37İzleyin | CVE-2021-21882İstismar yok | An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.lantronix · premierwave 2050 firmware · CWE-78 | Yüksek8,8 | — | %6,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21888İstismar yok | An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %3,8 | 22 Ara 2021 |
37İzleyin | CVE-2021-21890İstismar yok | A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (ilantronix · premierwave 2050 firmware · CWE-121 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21891İstismar yok | A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (ilantronix · premierwave 2050 firmware · CWE-121 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21887İstismar yok | A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (lantronix · premierwave 2050 firmware · CWE-121 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21873İstismar yok | A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21874İstismar yok | A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21875İstismar yok | A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %3,0 | 22 Ara 2021 |
37İzleyin | CVE-2021-21876İstismar yok | Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %2,7 | 22 Ara 2021 |
37İzleyin | CVE-2021-21877İstismar yok | Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests.lantronix · premierwave 2050 firmware · CWE-78 | Kritik9,1 | — | %2,7 | 22 Ara 2021 |
37İzleyin | CVE-2021-21894İstismar yok | A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).lantronix · premierwave 2050 firmware · CWE-22 | Kritik9,1 | — | %2,4 | 22 Ara 2021 |
37İzleyin | CVE-2025-67039İstismar yok | Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channellantronix · eds3016ps1ns firmware · CWE-288 | Kritik9,3 | — | %0,4 | 11 Mar 2026 |
36İzleyin | CVE-2021-21879İstismar yok | A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4.lantronix · premierwave 2050 · CWE-22 | Yüksek8,8 | — | %3,7 | 22 Ara 2021 |
34İzleyin | CVE-2025-67034İstismar yok | Lantronix EDS5000, G520, and X300 OS Command Injectionlantronix · eds5032 firmware · CWE-78 | Yüksek8,6 | — | %0,5 | 11 Mar 2026 |
34İzleyin | CVE-2025-67041İstismar yok | Lantronix EDS3000PS OS Command Injectionlantronix · eds3016ps1ns firmware · CWE-78 | Yüksek8,6 | — | %0,4 | 11 Mar 2026 |
- CVE-2025-6703873Bu hafta
Lantronix EDS5000, G520, and X300 OS Command Injection
KritikCVSS 9,3KEVSilahlaştırılmışEPSS %20lantronix · eds5008 firmware11 Mar 2026
- CVE-2021-2188150Planlayın
An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0
KritikCVSS 9,9Kavram kanıtıEPSS %36lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2189248Planlayın
A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QE
KritikCVSS 9,9İstismar yokEPSS %30lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2014-900242Planlayın
Lantronix xPrintServer does not properly restrict access to ips/, which allows remote attackers to execute arbitrary commands via the c para
KritikCVSS 10,0İstismar yokEPSS %5lantronix · xprintserver20 Kas 2014
- CVE-2021-2187241Planlayın
An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R
KritikCVSS 9,9İstismar yokEPSS %6lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2188341Planlayın
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4.
KritikCVSS 9,9İstismar yokEPSS %6lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2188940Planlayın
A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).
KritikCVSS 9,9İstismar yokEPSS %2lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2016-432540Planlayın
Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials, which allows remote attackers to obtain root access
KritikCVSS 9,8İstismar yokEPSS %2lantronix · xprintserver firmware14 May 2016
- CVE-2018-1292539İzleyin
Baseon Lantronix MSS devices do not require a password for TELNET access.
KritikCVSS 9,8İstismar yokEPSS %1lantronix · mss firmware28 Haz 2018
- CVE-2021-2188438İzleyin
An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4.
KritikCVSS 9,1İstismar yokEPSS %5lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2188237İzleyin
An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4.
YüksekCVSS 8,8İstismar yokEPSS %6lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2188837İzleyin
An OS command injection vulnerability exists in the Web Manager SslGenerateCertificate functionality of Lantronix PremierWave 2050 8.9.0.0R4
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2189037İzleyin
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (i
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2189137İzleyin
A stack-based buffer overflow vulnerability exists in the Web Manager FsBrowseClean functionality of Lantronix PremierWave 2050 8.9.0.0R4 (i
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2188737İzleyin
A stack-based buffer overflow vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4 (
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2187337İzleyin
A specially-crafted HTTP request can lead to arbitrary command execution in RSA keypasswd parameter.
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2187437İzleyin
A specially-crafted HTTP request can lead to arbitrary command execution in DSA keypasswd parameter.
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2187537İzleyin
A specially-crafted HTTP request can lead to arbitrary command execution in EC keypasswd parameter.
KritikCVSS 9,1İstismar yokEPSS %3lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2187637İzleyin
Specially-crafted HTTP requests can lead to arbitrary command execution in PUT requests.
KritikCVSS 9,1İstismar yokEPSS %2lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2187737İzleyin
Specially-crafted HTTP requests can lead to arbitrary command execution in “GET” requests.
KritikCVSS 9,1İstismar yokEPSS %2lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2021-2189437İzleyin
A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU).
KritikCVSS 9,1İstismar yokEPSS %2lantronix · premierwave 2050 firmware22 Ara 2021
- CVE-2025-6703937İzleyin
Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel
KritikCVSS 9,3İstismar yokEPSS %0lantronix · eds3016ps1ns firmware11 Mar 2026
- CVE-2021-2187936İzleyin
A directory traversal vulnerability exists in the Web Manager File Upload functionality of Lantronix PremierWave 2050 8.9.0.0R4.
YüksekCVSS 8,8İstismar yokEPSS %3lantronix · premierwave 205022 Ara 2021
- CVE-2025-6703434İzleyin
Lantronix EDS5000, G520, and X300 OS Command Injection
YüksekCVSS 8,6İstismar yokEPSS %0lantronix · eds5032 firmware11 Mar 2026
- CVE-2025-6704134İzleyin
Lantronix EDS3000PS OS Command Injection
YüksekCVSS 8,6İstismar yokEPSS %0lantronix · eds3016ps1ns firmware11 Mar 2026