Forescout Finds 20 Flaws and Thousands of Known Bugs in Serial-to-IP Devices
Summary
Forescout identified 20 vulnerabilities in Lantronix and Silex serial-to-IP converters and found averages of 212 known open-source flaws and 2,255 kernel bugs per firmware image. Researchers also cited difficult patching and limited binary hardening.
Key points
- Forescout identified eight previously undisclosed vulnerabilities in Lantronix EDS3000PS and EDS5000PS models and 12 in Silex SD330-AC.
- The EDS5000PS has five reported remote-code-execution flaws; two were rated CVSS 9.8. CVE-2025-70082 affects the EDS3000PS and allows a password change through its web interface without entering the old password.
- Forescout found an average of 212 known vulnerabilities in open-source components and 2,255 kernel bugs per firmware image; it cautioned that not all may be exploitable in device configurations.
- The study estimated more than 10 million serial device servers worldwide, with tens of thousands discoverable on the public internet.
- A Forescout researcher demonstrated how device compromise could alter data sent between connected equipment, such as a barcode reader or thermometer, and the network.
- Researchers said patching can be difficult for always-on industrial devices and that modern hardening such as ASLR is not broadly applied.
Article Details
- Event Type
- Vulnerability research disclosure involving serial-to-IP converters
- Impact
- Forescout identified 20 previously undisclosed vulnerabilities in Lantronix and Silex converter models. Several enable remote code execution, including critical flaws rated CVSS 9.8; CVE-2025-70082 affects password changes through the device's Web interface without requiring the old password, potentially allowing an attacker to take over the device and lock out administrators. Forescout also reported averages of 212 known open-source component vulnerabilities and 2,255 kernel bugs per firmware image, while cautioning that its stack analysis was cursory and not all issues may be exploitable. Compromised converters could let an attacker alter data traveling between industrial equipment and IP networks or change data sensed or acted on in the physical world.
CVE
People
Vendors
LantronixForescout will present these findings at Black Hat Asia 2026, highlighting critical RCE flaws in Lantronix and Silex models (including CVE-2025-70082) and demonstrating how attackers can manipulate physical sensors andSilexwill present these findings at Black Hat Asia 2026, highlighting critical RCE flaws in Lantronix and Silex models (including CVE-2025-70082) and demonstrating how attackers can manipulate physical sensors and
Products
EDS5000PSForescout’s study focused on three popular models of converter from two of the larger vendors in the space: Lantronix’s EDS3000PS and EDS5000PS, and Silex’s SD330-AC.Lantronix EDS3000PSForescout’s study focused on three popular models of converter from two of the larger vendors in the space: Lantronix’s EDS3000PS and EDS5000PS, and Silex’s SD330-AC.SD330-ACForescout’s study focused on three popular models of converter from two of the larger vendors in the space: Lantronix’s EDS3000PS and EDS5000PS, and Silex’s SD330-AC.