Skip to content
Threat Feed
Subscribe

Vendor

Lantronix

3 briefs RSS
critical advisory

Authentication Bypass in Lantronix CoBos Firmware

Lantronix XPress-DR and XPress-DR-I devices running firmware version 8.1.0.0 and earlier are vulnerable to remote configuration manipulation via an unauthenticated UDP configuration protocol.

XPress-DR +1 industrial-control-systems network-security embedded-devices
2t 1c
high threat

Critical Vulnerabilities in Lantronix G520 Series Cellular Gateway

Multiple vulnerabilities in Lantronix G520 Series Cellular Gateway firmware allow remote, unauthenticated attackers to execute arbitrary code with root privileges by manipulating update metadata or injecting unsigned malicious packages.

exploited G520 Series Cellular Gateway ics cve firmware-vulnerability remote-code-execution
2t
critical advisory

Command Injection in Lantronix Console Managers (CVE-2026-80143)

Authenticated attackers can execute arbitrary shell commands as root on multiple Lantronix console manager models by exploiting an undocumented MFC EEPROM read command that triggers command injection via a system call.

SLC8000 +5 cve-2026-80143 command-injection network-infrastructure
2t 1c