[0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-09-04 00:11 UTC
  • Importiert: 2026-09-04 00:48 UTC
  • Quelle-ID: full_disc
  • uid_hash: 95ea6b32aff7837a2b1525eb19b01b2b2e2716f3d808a484cf2a6e9ff1fdadb4
Full Disclosure

Inhalt

Posted by disclosure via Fulldisclosure on Sep 03 0day Rubbish Research Team is publicly disclosing two vulnerabilities in Lantronix EDS3000PR 3.2.0.0R2.

Vulnerability 1 — Authenticated command injection to root RCE in FsUnmount (CVSS 8.8,

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, CWE-78)

Lantronix EDS3000PR is an industrial serial device server (CII/OT). Its FsUnmount page handler validates a

user-supplied path against a character bitmask that rejects most shell metacharacters but...

No data

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
Full Disclosure

full_disc

 threat_intel - de https://seclists.org/rss/fulldisclosure.rss
Zurueck zur Eintrags-Liste