Lantronix EDS3000PS and EDS5000 Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Lantronix EDS3000PS version 3.1.0.0R2 and EDS5000 version 2.1.0.0R3. This vulnerability allows unauthorized access to management pages by appending a specific suffix to the URL and sending an Authorization header with 'admin' as the username.

Impact

Exploitation of this vulnerability allows for authentication bypass, potentially leading to unauthorized access and actions within the application. According to CISA, successful exploitation could allow an attacker to execute code with root-level privileges.