The administrator password can be changed without knowledge of the current password.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 11, 2026 · NIST NVD

   Detected

   The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

2. Sep 4, 2026 · NIST NVD

   Updated

   The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

Affected

• cpe lantronix/eds3008ps1ns firmware3.1.0.0r2
• cpe lantronix/eds3016ps1ns firmware3.1.0.0r2

Sources

• NIST NVDVulnerability recordCVE-2025-70082

  The administrator password can be changed without knowledge of the current password. When chained with an authentication bypass vulnerability, this issue may allow unauthenticated attackers to modify the administrator password.

  nvd.nist.gov

References

• Reference · github.com
• Third Party Advisory · cisa.gov
• Reference · lantronix.com