Unauthenticated Lantronix WebSSH and WebTelnet clients can pivot into protected management networks.

A caller who can reach either listener can select a destination and make the controller originate an SSH or Telnet connection into networks unavailable from the caller's position. The default listener interface is not stated, and the published fixes were not reviewed for this brief, so this cannot lead.