CVE-2025-67036
Affected Products
Overview
Lantronix has addressed this security vulnerability affecting the X300 Series and the G520 Series Gateways. This vulnerability could allow an attacker to perform unauthorized actions under specific conditions.
X300 Series
This CVE is addressed by firmware release 2.6.0.4R6 published on June 29th, 2026.
Recommended Actions
- Upgrade to firmware version 2.6.0.4R6 or later.
G520 Series
This CVE is addressed by firmware release 2.6.0.4R6 published on June 29th, 2026.
Recommended Actions
- Upgrade to firmware version 2.6.0.4R6 or later.
EDS 5000 Series
A firmware update addressing these vulnerabilities has been available since February 20, 2026. Customers should verify they are running the latest firmware version and update as soon as possible if they have not already done so.
Recommended Actions
- Upgrade to firmware version 2.2.0.0R1 or later.
- Download the latest firmware and release notes
Interim Mitigation (if unable to patch immediately)
- Replace default credentials, and prohibit weak passwords, to reduce the risk of brute force attacks and exploitation of authenticated vulnerabilities.
- Restrict network access to affected devices.
- Place affected devices behind a firewall.
- Limit management interfaces to trusted networks only.
Support
For technical assistance or questions regarding this advisory, please contact [email protected]
Revision History
| Version | Date | Section | Status | Description |
|---|---|---|---|---|
| 1 | June 29, 2026 | Fixed | New Firmware Available |
