Unauthenticated code execution via cookie path truncation

Authentication bypass in Lantronix SLC and EMG firmware allows remote attackers to read configuration files and execute code. The web server formats a session-cookie path into a fixed-size buffer; a precisely sized cookie truncates the required delimiter and redirects validation through path traversal to an attacker-chosen local file. Access to the web management portal is sufficient, and successful exploitation permits configuration disclosure, arbitrary file placement, device compromise, and impact to serial-connected equipment.