Skip to content
OpenAdvisories
High · 7.5 CVE-2025-59780 EUVD-2025-197668GHSA-mqgv-qm98-7w7m

General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

Published Nov 14, 2025 · Updated Nov 17, 2025 · Assigned by icscert

Description

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which
could allow an attacker to send GET requests to obtain sensitive device
information.

Affected products

VendorProductAffectedFixed
General Industrial Controls Lynx+ Gateway Version R08, Version V03, Version V05, Version V18 —

Advisories 1

References