CVE-2026-80144criticalCWE-78

CVE-2026-80144: fallo crítico en LANTRONIX SLC8000

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear EMG7500+ Monitorear EMG8500

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9.4epss 1.7%
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers to execute arbitrary shell commands as root by exploiting an undocumented mfc eeprom write command that passes unsanitized user input to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
LANTRONIX · EMG7500LANTRONIX · EMG8500LANTRONIX · SLB882LANTRONIX · SLC8000LANTRONIX · SLC9000LANTRONIX · SLCx-02LANTRONIX · SLCx-03
CVEs relacionadas — LANTRONIX SLC8000

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-80145CRITICALLantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs passwordEPSS 1.9%CVE-2026-80143CRITICALLantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom readEPSS 1.7%CVE-2026-80152CRITICALLantronix Autonomous Out-of-Band Devices OS Command Injection via set script scheduleEPSS 1.7%CVE-2026-80151CRITICALLantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs downloadEPSS 1.7%CVE-2026-80155CRITICALLantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path TruncationEPSS 1.0%CVE-2026-80146CRITICALLantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom readEPSS 0.8%