Skip to content
OpenAdvisories
Critical ICSA-25-317-08 4 CVEs

General Industrial Controls Lynx+ Gateway

Published Nov 13, 2025 · Updated Nov 13, 2025

Vendor: General Industrial Controls Product: Lynx+ Gateway

Summary

Successful exploitation of these vulnerabilities could result in obtaining sensitive device information, unauthorized access, or create a denial-of-service condition.

Vulnerabilities 4

  • Critical 10.0
    CVE-2025-58083

    General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

    General Industrial Controls Lynx+ Gateway  is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device.

    General Industrial Controls Lynx+ Gateway
  • High 8.2
    CVE-2025-55034

    General Industrial Controls Lynx+ Gateway Weak Password Requirements

    General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.

    General Industrial Controls Lynx+ Gateway
  • High 7.5
    CVE-2025-59780

    General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

    General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

    General Industrial Controls Lynx+ Gateway
  • High 7.5
    CVE-2025-62765

    General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information

    General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to obtain sensitive information, including plaintext credentials.

    General Industrial Controls Lynx+ Gateway

Revision history

  1. #1

    Initial Publication

References