Back to Database
Status published
Medium
CVE-2005-2189
Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores...
Vulnerability Description
Lantronix SecureLinx console server running firmware 2.0 and 3.0 stores /etc/ssh under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as SSH private keys.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2189
Credits & Attribution
No credits recorded in the NVD database.
More from lantronix
View All →CVE-2018-12925
Baseon Lantronix MSS devices do not require a password for...
Critical
9.8
CVE-2018-10383
Lantronix SecureLinx Spider (SLS) 2.2+ devices have XSS in the...
Medium
6.1
CVE-2016-4325
Lantronix xPrintServer devices with firmware before 5.0.1-65 have hardcoded credentials,...
Critical
9.8
CVE-2014-9003
Cross-site request forgery (CSRF) vulnerability in Lantronix xPrintServer allows remote...
Medium
6.8
CVE-2014-9002
Lantronix xPrintServer does not properly restrict access to ips/, which...
Critical
10
Affected Vendor
lantronix
View all reports →Affected Software
securelinx
Vulnerable Versions:
2.0, 3.0
Timeline
Official Publish:
July 10th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.