Lantronix EDS3000PS and EDS5000

Multiple critical vulnerabilities discovered in Lantronix EDS3000PS and EDS5000 devices allowing authentication bypass and remote code execution with root privileges. Eight CVEs affect various functions including OS command injection in SSL credential management, SSH pages, log viewing, tunnel management, and authentication bypass. CVSS scores range from 2.7 to 9.8 (Critical). Vulnerabilities enable attackers to bypass authentication and execute arbitrary commands with root-level privileges. Affects critical infrastructure sectors including Communications, Information Technology, and Critical Manufacturing worldwide. Vendor patches available for both affected product lines.