CVE-2025-2567 — Lantronix Xport Missing Authentication for Critical Function

CVE-2025-2567

Lantronix Xport Missing Authentication for Critical Function PUBLISHED

Description (CNA)

An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation.

Affected (CNA)

Vendor / product	Versions
Lantronix / Xport	affected 6.5.0.7 through 7.0.0.3

CWE

CWE-306

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.