Volerion logoVolerion
Volerion logoVolerion

Lantronix Provisioning Manager Unauthenticated Remote Code Execution Vulnerability via XML External Entity Attack

Vulnerability

A vulnerability in Lantronix Provisioning Manager versions through 7.10.2 allows for unauthenticated remote code execution. This issue arises from improper handling of XML external entity references in configuration files provided by network devices, creating a risk of XML external entity (XXE) attacks.

Impact

Exploitation of this vulnerability could lead to unauthorized remote code execution on the host where Lantronix Provisioning Manager is installed.

Remediation

Users are advised to update Lantronix Provisioning Manager to version 7.10.4 or later.

Added: Jul 22, 2025, 10:20 PM
Updated: Jul 22, 2025, 10:20 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
7.4
remediation
7.7
relevance
0.3
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.