An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.
CVE-2025-67039
NONE
EPSS 0.06%
Updated Mar 11, 2026
Lantronix
CVE Details
CVE ID
CVE-2025-67039
Published Date
Mar 11, 2026
Vendor
Lantronix
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.06%
Likelihood of exploitation in next 30 days
Percentile:
17.2th percentile (higher than 17.2% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory