CVE-2025-67038
Affected Products
Overview
Lantronix has addressed this security vulnerabilities affecting the E210 and E220 Series Router, the X300 Series, and the G520 Series Gateways. This vulnerability could allow an attacker to perform unauthorized actions under specific conditions.
E210 Series & E220 Series
This CVE is addressed by firmware release 3.21.0.0R1 published on June 29th, 2026.
Recommended Actions
- Upgrade to firmware version 3.21.0.0R1 or later.
- Download the latest firmware and release notes:
X300 Series
This CVE is addressed by firmware release 2.6.0.4R6 published on June 29th, 2026.
Recommended Actions
- Upgrade to firmware version 2.6.0.4R6 or later.
G520 Series
This CVE is addressed by firmware release 2.6.0.4R6 published on June 29th, 2026.
Recommended Actions
- Upgrade to firmware version 2.6.0.4R6 or later.
EDS 5000 Series
A firmware update addressing these vulnerabilities has been available since February 20, 2026. Customers should verify they are running the latest firmware version and update as soon as possible if they have not already done so.
Recommended Actions
- Upgrade to firmware version 2.2.0.0R1 or later.
- Download the latest firmware and release notes
Interim Mitigation (if unable to patch immediately)
- Replace default credentials, and prohibit weak passwords, to reduce the risk of brute force attacks and exploitation of authenticated vulnerabilities.
- Restrict network access to affected devices.
- Place affected devices behind a firewall.
- Limit management interfaces to trusted networks only.
Support
For technical assistance or questions regarding this advisory, please contact [email protected]
Revision History
| Version | Date | Section | Status | Description |
|---|---|---|---|---|
| 1 | June 29, 2026 | Fixed | Firmware Upgrade Available |
