CVE-2025-2567CWE-306

Lantronix Xport Missing Authentication for Critical Function

Critical · published April 15, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

🔥 A crafty attacker could tamper with critical fuel settings, potentially leading to disastrous safety hazards! Imagine a train conductor suddenly deciding to reroute your train without permission — they could send it off the tracks! Similarly, this vulnerability allows improper modifications to fuel monitoring systems, disrupting the entire supply chain. The consequences could be absolutely devastating: disabling crucial ATG monitoring puts fuel storage and transportation in jeopardy, creating serious safety risks and operational chaos. This isn't just a minor glitch; we're talking about potential environmental disasters and severe financial losses.

Put simply

Imagine a train conductor suddenly deciding to reroute your train without permission — they could send it off the tracks! Similarly, this vulnerability allows improper modifications to fuel monitoring systems, disrupting the entire supply chain. This vulnerability allows attackers to modify or disable key settings within the fuel monitoring system, disrupting supply chain operations and potentially leading to critical safety failures.

What to do

The consequences could be absolutely devastating: disabling crucial ATG monitoring puts fuel storage and transportation in jeopardy, creating serious safety risks and operational chaos. This isn't just a minor glitch; we're talking about potential environmental disasters and severe financial losses. Ensure that access controls are tightened and audit logs are reviewed to track any unauthorized changes. Patch the vulnerable system immediately to the latest version provided by the vendor to mitigate this risk. You've got this! With a few quick steps, you can secure your systems and keep everything running smoothly. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00507 · 42.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-04-15T19:59Z
EPSS history
Timeline
  • 15 APR 19:59Z
    Lantronix Xport Missing Authentication for Critical Function
    cvelistv5