serial-to-IP converter – Industrial Secops

BRIDGE:BREAK in the Wild: The Lantronix Serial-to-IP Flaw That Gives Attackers Root Access to Your OT Network

June 28, 2026

•

Industrial Secops

CVE-2025-67038 in Lantronix EDS5000 serial-to-IP converters is actively exploited in the wild. Forescout confirmed attackers reverse-engineered the firmware patch to build an exploit weeks before public disclosure. CISA added it to the KEV catalog June 23, 2026 with a 72-hour patch deadline.