Advisories · Technology
LANTRONIX SLC9000.
Every CVE that names LANTRONIX SLC9000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Path traversal
- CVSS 10.0 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Path traversal
- CVSS 8.9 High
Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Weak cryptography or TLS
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Command injection
- CVSS 7.7 High
Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Server-side request forgery (SSRF)
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Memory corruption
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Memory corruption
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
- LANTRONIX SLC8000
- LANTRONIX EMG8500
- Command injection