9.8 CriticalCWE-620
CVE-2025-70082
Lantronix EDS3000PS Unverified Password Change
LantronixEDS3000PS series
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 41% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.
Coverage 1 article · 1 outlet
- Critical RCE flaws hit Lantronix, Silex serial IP convertersDark Reading · first in our coverage