Is CVE-2025-67034 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-67034 being exploited in the wild.

How severe is CVE-2025-67034?

High severity, with a CVSS score of 8.8, published 11 March 2026.

Which products and versions are affected?

Lantronix EDS5000 firmware 2.1.0.0R3; Lantronix Eds5008 2.1.0.0R3; Lantronix Eds5016 2.1.0.0R3; Lantronix Eds5032 2.1.0.0R3.

Is there a fix for CVE-2025-67034?

A patch was published on 2026-03-11: Lantronix released firmware version 2.2.0.0R1 to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-67034 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-67034?

Check whether you run Lantronix EDS5000 firmware, Lantronix Eds5008, Lantronix Eds5008 Firmware or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-67034: Lantronix EDS5000 OS command injection in SSL credential deletion

CVE-2025-67034 · Severity: high · CVSS 8.8 · Published 2026-03-11

Lantronix EDS5000 series devices, which are used to connect and manage industrial equipment over a network, contain a security flaw in their management interface. An authorized user can send a specially crafted request while deleting security credentials to take full control of the device. This could allow an attacker to disrupt industrial operations, intercept sensitive data, or use the device as a foothold to attack other parts of the corporate network.

Technologies: Lantronix EDS5000 firmware, Lantronix Eds5008, Lantronix Eds5008 Firmware, Lantronix Eds5016, Lantronix Eds5016 Firmware, Lantronix Eds5032, Lantronix Eds5032 Firmware. Vendors: Lantronix.

Quick answers

Is CVE-2025-67034 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-67034 being exploited in the wild.
How severe is CVE-2025-67034?: High severity, with a CVSS score of 8.8, published 11 March 2026.
Which products and versions are affected?: Lantronix EDS5000 firmware 2.1.0.0R3; Lantronix Eds5008 2.1.0.0R3; Lantronix Eds5016 2.1.0.0R3; Lantronix Eds5032 2.1.0.0R3.
Is there a fix for CVE-2025-67034?: A patch was published on 2026-03-11: Lantronix released firmware version 2.2.0.0R1 to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-67034 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-67034?: Check whether you run Lantronix EDS5000 firmware, Lantronix Eds5008, Lantronix Eds5008 Firmware or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability exists in the Lantronix EDS5000 firmware version 2.1.0.0R3. The flaw is located within the management interface's SSL credential deletion functionality, specifically due to improper sanitization of the 'name' parameter. An authenticated attacker with network access to the management interface can inject arbitrary shell commands that the system executes with root-level privileges. This vulnerability is tracked as CWE-94/CWE-78. Lantronix has released firmware version 2.2.0.0R1 to address this and several other related injection vulnerabilities.

Affected products

Lantronix EDS5000 firmware 2.1.0.0R3
Lantronix EDS5008 2.1.0.0R3
Lantronix EDS5016 2.1.0.0R3
Lantronix EDS5032 2.1.0.0R3

Timeline

2026-03-10: advisory: CISA ICS Advisory ICSA-26-069-02 published
2026-03-11: disclosed: CVE-2025-67034 published to NVD
2026-03-11: patched: Lantronix released firmware version 2.2.0.0R1 to address the issue

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.