CVE-2025-67039 — Lantronix EDS3000PS Authentication Bypass Using an Alternate Path or Channel
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Auth…
Published: 2026-03-11 · CVSS: 9.3 · CVSS 4.0
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7