Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning

CISA has added a Lantronix serial-to-IP converter vulnerability to its list of actively exploited flaws, warning federal agencies to patch immediately. The vulnerability, CVE-2025-67038, affects Lantronix EDS5000 device servers and allows unauthenticated attackers to inject commands with root privileges, potentially compromising industrial, healthcare, and other operational technology systems. The flaw was among 20 vulnerabilities disclosed in April that researchers showed could be exploited to manipulate sensor readings in critical environments or serve as a gateway for deeper network intrusion.