VULNERABILITY INTELLIGENCE
CVE-2025-7766
CVSS score8 HIGH
EPSS probability2.05%
CISA KEVNot currently listed
Published2025-07-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Lantronix Provisioning Manager is vulnerable to XML external entity attacks in configuration files supplied by network devices, leading to unauthenticated remote code execution on hosts with Provisioning Manager installed.
Weakness classification
- ics-cert@hq.dhs.gov: CWE-611