PT-2025-16389 · Lantronix · Xport

Souvik Kandar · Published 2025-04-15 · Updated 2025-05-12 · CVE-2025-2567

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation. Cyber attackers targeting fuel monitoring systems could cause disruptions to the supply chain, jeopardizing safety in fuel storage and transportation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2025-14397

CVE-2025-2567

Affected Products

Xport

References · 10

• https://bdu.fstec.ru/vul/2025-14397 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-2567 · Security Note
• https://twitter.com/CVEnew/status/1912243268697628721 · Twitter Post
• https://twitter.com/syedaquib77/status/1912601516629954983 · Twitter Post
• https://t.me/purp_sec/614 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-105-05 · Note
• https://t.me/cvedetector/23014 · Telegram Post
• https://twitter.com/ZeroPathLabs/status/1912947174788186348 · Twitter Post
• https://twitter.com/CveFindCom/status/1912234872812319075 · Twitter Post
• https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/100565267/Latest+firmware+for+the+XPort-05 · Note