Description
Lantronix EDS5000 contains a code injection vulnerability that could allow attackers to inject arbitrary OS commands into the username parameter. Injected commands are executed with root privileges.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| E210 series | Lantronix / E210 series | >= 0, < 3.21.0.0R1 | affected |
| E210 series | Lantronix / E210 series | 3.21.0.0R1 | unaffected |
| E220 series | Lantronix / E220 series | >= 0, < 3.21.0.0R1 | affected |
| E220 series | Lantronix / E220 series | 3.21.0.0R1 | unaffected |
| EDS5000 series | Lantronix / EDS5000 series | >= 0, <= 2.1.0.0R3 | affected |
| EDS5000 series | Lantronix / EDS5000 series | 2.2.0.0R1 | unaffected |
| G520 series | Lantronix / G520 series | >= 0, < 2.6.0.4R6 | affected |
| G520 series | Lantronix / G520 series | 2.6.0.4R6 | unaffected |
| X300 series | Lantronix / X300 series | >= 0, < 2.6.0.4R6 | affected |
| X300 series | Lantronix / X300 series | 2.6.0.4R6 | unaffected |