CVE-2025-7766CWE-611

Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference

High · published July 22, 2025

CVSS v4.0
8.6
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
EPSS
0.02050 · 81.1th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2025-07-22T21:44Z
EPSS history
Timeline
  • 22 JUL 21:44Z
    Lantronix Provisioning Manager Improper Restriction of XML External Entity Reference
    cvelistv5