Detections
Analytics
CVE-2025-67039
critical
Description
An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses "admin" as the username.
References
https://www.cisa.gov/news-events/ics-advisories/icsa-26-069-02