Description
Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Published: 2026-09-22
Score: 9.4 Critical
EPSS: 1.7% Low
KEV: No
Impact: Remote Code Execution
Action: Patch Immediately
AI Analysis

Impact

Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a CWE‑78 Operating System Command Injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial‑attached devices.

Affected Systems

Affected are Lantronix SLC8000 devices running firmware versions prior to 9.7.0.3, SLC9000 devices running firmware prior to 9.7.0.2, EMG8500 and EMG7500 devices with firmware before 9.7.0.1, and all firmware releases of SLB882, SLCx‑03 and SLCx‑02.

Risk and Exploitability

The vulnerability carries a CVSS score of 9.4, indicating critical severity. EPSS score is 2% and the flaw is not listed in the CISA KEV catalog. The attack requires authenticated access with services permission, so the likely vector is an insider or privileged user compromising the terminal or CLI interface to inject malicious commands.

Generated by OpenCVE AI on September 26, 2026 at 14:41 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor’s firmware update that addresses the CWE‑78 command injection vulnerability.
  • Limit the services permission to trusted administrators only, reducing the ability to exploit the CWE‑78 vulnerability.
  • Monitor system logs for anomalous command executions that could indicate exploitation of the CWE‑78 flaw and investigate promptly.

Generated by OpenCVE AI on September 26, 2026 at 14:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 24 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Description Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices. Lantronix SLC8000 before firmware v9.7.0.3, SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
References

Tue, 22 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
First Time appeared Lantronix
Lantronix emg7500
Lantronix emg8500
Lantronix slb882
Lantronix slc8000
Lantronix slcx-02
Lantronix slcx-03
Vendors & Products Lantronix
Lantronix emg7500
Lantronix emg8500
Lantronix slb882
Lantronix slc8000
Lantronix slcx-02
Lantronix slcx-03

Tue, 22 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Description Lantronix SLC8000 before firmware v9.7.0.3, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a command injection vulnerability that allows authenticated attackers with the services permission to execute arbitrary shell commands as root by exploiting the set nfs download command that passes unsanitized user input to a system() call. Attackers with the services permission can authenticate to the terminal or CLI interface and inject malicious commands through the unsanitized parameter to achieve complete loss of confidentiality, integrity, and availability on the affected device and potentially impact downstream serial-attached devices.
Title Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}

Subscriptions

Lantronix Emg7500 Emg8500 Slb882 Slc8000 Slcx-02 Slcx-03
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-26T13:29:53.855Z

Reserved: 2026-08-25T20:43:54.261Z

Link: CVE-2026-80151

cve-icon Vulnrichment

Updated: 2026-09-25T23:35:11.123Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-22T16:18:01.460

Modified: 2026-09-26T14:16:59.337

Link: CVE-2026-80151

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T14:45:07Z

Weaknesses
  • CWE-78

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')