An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. The authentication on management pages can be bypassed by appending a specific suffix to the URL and by sending an Authorization header that uses admin as the username.
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.