Lantronix G520 Series Cellular Gateway: 2 CVEs, High 7.5
Summary
CISA reports 2 vulnerabilities in Lantronix G520 Series. Weakness types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Verification of Cryptographic Signature. Successful exploitation of these vulnerabilities could allow an attacker to replace software and execute arbitrary code with root privileges. Highest CVSS v3 score: 7.5 (High), exploitable over the network.
At a glance
- Vendor
- Lantronix
- Products
- G520 Series
- CVEs
- CVE-2026-84409, CVE-2026-91191
- Highest CVSS v3
- 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Highest CVSS v4
- –
- Known exploited (KEV)
- No CVE from this advisory is on the KEV list as of the last refresh
- Sectors (per CISA)
- Transportation Systems, Energy, Water and Wastewater Systems
- Deployed
- Worldwide
- Vendor HQ
- United States
Vulnerabilities
| CVE | Weakness | CVSS v3 | CVSS v4 | KEV | Description (from advisory) |
|---|---|---|---|---|---|
| CVE-2026-84409 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 7.5 | – | No | The device's update mechanism retrieves metadata for software updates over an unencrypted HTTP connection and stores portions of that metadata for later use. A management interface subsequently returns this stored value in a JSON response, and the web interface responsible for displaying update information inserts that value directly into the page as HTML. This behavior allows attacker‑controlled … |
| CVE-2026-91191 | Improper Verification of Cryptographic Signature | 7.5 | – | No | The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed. Separately, the publicly distributed SDK contains the production private key whose corresponding public k… |
Affected products (1)
- Lantronix G520 Series: 2.6.0.4R6_stable
Vendor fixes and mitigations (from advisory)
- Mitigation: Lantronix has addressed the reported issues with release version 2.6.0.7R6 which is available on their website. link
- Mitigation: For more information, see the Lantronix Vulnerability Library. link
- Mitigation: For more information or technical assistance, contact Lantronix support: Support@lantronix.com link
Also apply CISA's standard ICS practices: minimize network exposure, keep control networks behind firewalls and isolated from business networks, and use up-to-date secure remote access.
Sources
This page is generated automatically from the CISA advisory text. It is not a substitute for the vendor's guidance; verify affected versions and fixes at the source before making changes to control systems.