CVE-2025-7766
HIGH8.0CVSS v3
—CVSS v2
0.48%
EPSS (exploit probability)
CWE-611CWE
Description
Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.
CVSS v3 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected routers (0)
No routers currently mapped to this CVE in our database.