OTPulse

Lantronix G520 Series Cellular Gateway

MonitorCVSS 7.5ICS-CERT ICSA-26-272-01Sep 29, 2026
Lantronix
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityHigh
User InteractionRequired
Summary

Lantronix G520 Series gateway contains a cross-site scripting vulnerability and signature verification flaw that could allow an attacker to replace software and execute arbitrary code with root privileges. The vulnerabilities affect version 2.6.0.4R6_stable. A patch is available in firmware version 2.6.0.7R6.

What this means
What could happen
An attacker could execute arbitrary code with root privileges on the Lantronix G520 gateway, potentially allowing them to replace firmware, modify network configuration, or intercept/redirect traffic passing through the device.
Who's at risk
Telecommunications and network infrastructure operators using Lantronix G520 Series cellular gateways for site connectivity, branch office links, or backup WAN in utilities, municipalities, or industrial facilities should prioritize this update.
How it could be exploited
The vulnerability involves cross-site scripting (CWE-79) and signature verification issues (CWE-347). An attacker could craft a malicious request that bypasses signature verification and executes code, or exploit XSS to trick an administrator into performing actions that lead to code execution on the device.
Prerequisites
  • Network access to the G520 device's web interface
  • User interaction (administrator must click a malicious link or open a crafted page)
remotely exploitablehigh impact (root code execution)affects network infrastructure devices
Exploitability
Unlikely to be exploited — EPSS score 0.4%
Affected products (1)
ProductAffected VersionsFix Status
G520 Series: 2.6.0.4R6_stable2.6.0.4R6 stableNo fix yet
Remediation & Mitigation
0/1
Schedule — requires maintenance window
0/1

Patching may require device reboot — plan for process interruption

HOTFIXUpdate Lantronix G520 firmware to version 2.6.0.7R6 or later
View full CISA ICS-CERT advisory
API: /api/v1/advisories/26124043-2125-4a9d-996c-207cde24f8ba

Get OTPulse briefings by email

Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.