CyberRota Analysis
AI-GeneratedThe vulnerability affects Lantronix SLC8000, EMG8500/EMG7500, and SLB882/SLCx-03/SLCx-02 devices running specific firmware versions, allowing authenticated attackers to exploit a stack-based buffer overflow via an undocumented command. This can lead to arbitrary code execution, resulting in a complete compromise of the device's confidentiality, integrity, and availability, which may also impact connected serial devices. Organizations using these products should prioritize immediate remediation to mitigate the critical risk associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Lantronix SLC8000/SLC9000 before firmware v9.7.0.2, EMG8500/EMG7500 before firmware v9.7.0.1, and all firmware versions of SLB882/SLCx-03/SLCx-02 contain a stack-based buffer overflow vulnerability that allows authenticated attackers to potentially execute arbitrary code by exploiting an undocumented mfc eeprom write command that copies unbounded user input into a bounded stack buffer before passing it to a system() call. Attackers can authenticate as any user to the terminal or CLI interface and supply an oversized input to trigger the overflow, potentially achieving complete loss of confidentiality, integrity, and availability on the affected device and impacting downstream serial-attached devices.