# CVE-2025-70082: Lantronix EDS3000PS unverified password change in ltrx_evo

Source: https://junglewise.ai/threats/cve-2025-70082-lantronix-eds3000ps-unverified-password-change-in-ltrx-evo  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-11. Updated: 2026-06-23  
License: CC BY 4.0 with a link back

CVE-2025-70082 · Severity: critical · CVSS 9.8 · Published 2026-03-11

Lantronix EDS3000PS is a device server used to connect serial equipment to networks in industrial and enterprise environments. A critical security flaw allows unauthorized individuals to change the administrator password without knowing the current one. If exploited, an attacker could take full control of the device, access sensitive data, or disrupt operations across critical infrastructure sectors.

Technologies: [Lantronix EDS3000PS firmware](https://junglewise.ai/threats/technologies/eds3000ps-firmware), [Lantronix Eds3008ps1ns](https://junglewise.ai/threats/technologies/eds3008ps1ns), [Lantronix Eds3008ps1ns Firmware](https://junglewise.ai/threats/technologies/eds3008ps1ns-firmware), [Lantronix Eds3016ps1ns](https://junglewise.ai/threats/technologies/eds3016ps1ns), [Lantronix Eds3016ps1ns Firmware](https://junglewise.ai/threats/technologies/eds3016ps1ns-firmware). Vendors: [Lantronix](https://junglewise.ai/threats/vendors/lantronix).

## Quick answers

**Is CVE-2025-70082 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-70082 being exploited in the wild.

**How severe is CVE-2025-70082?** Critical severity, with a CVSS score of 9.8, published 11 March 2026.

**Which products and versions are affected?** Lantronix EDS3000PS firmware 3.1.0.0R2; Lantronix Eds3008ps1ns Firmware 3.1.0.0R2; Lantronix Eds3016ps1ns Firmware 3.1.0.0R2.

**Is there a fix for CVE-2025-70082?** A patch was published on 2026-03-11: Lantronix released firmware 3.2.0.0R2 to address the issue Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-70082 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-70082?** Check whether you run Lantronix EDS3000PS firmware, Lantronix Eds3008ps1ns, Lantronix Eds3008ps1ns Firmware or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in the ltrx_evo component of Lantronix EDS3000PS firmware version 3.1.0.0R2. The flaw (CWE-620) allows the administrator password to be changed without knowledge of the current password. When chained with other vulnerabilities like authentication bypass (CWE-288) or OS command injection (CWE-78), a remote, unauthenticated attacker can achieve full root-level code execution and sensitive information disclosure. The attack is network-reachable and requires no user interaction. Lantronix has released firmware version 3.2.0.0R2 to address this issue.

## Affected products

- Lantronix EDS3000PS firmware 3.1.0.0R2
- Lantronix EDS3008PS1NS 3.1.0.0R2
- Lantronix EDS3016PS1NS 3.1.0.0R2

## Timeline

- 2026-03-10: advisory: CISA ICS Advisory ICSA-26-069-02 published
- 2026-03-11: disclosed: CVE published in NVD
- 2026-03-11: patched: Lantronix released firmware 3.2.0.0R2 to address the issue

## References

- [http://eds3000ps.com/](http://eds3000ps.com/)
- [http://lantronix.com/](http://lantronix.com/)
- [https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02](https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02)

## Related threats

- [Lantronix EDS3000PS OS command injection in TFTP client](https://junglewise.ai/threats/cve-2025-67041-lantronix-eds3000ps-os-command-injection-in-tftp-client)
- [Lantronix EDS3000PS authentication bypass in management pages](https://junglewise.ai/threats/cve-2025-67039-lantronix-eds3000ps-authentication-bypass-in-management-pages)