CVE-2025-55034
published 2025-11-15CVE-2025-55034: General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force…
PriorityP348high8.2CVSS 3.1
AVNACLPRNUINSUCHILAN
EPSS
0.24%
15.3th percentile
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may
allow an attacker to execute a brute-force attack resulting in
unauthorized access and login.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| general_industrial_controls | lynx+_gateway | — | — |
| general_industrial_controls | lynx+_gateway | — | — |
| general_industrial_controls | lynx+_gateway | — | — |
| general_industrial_controls | lynx+_gateway | — | — |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
nvdv4.08.8HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-wx4m-xq4x-6x7v: General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may
allow an attacker to execute a brute-f
ghsa_unreviewed·2025-11-15
CVE-2025-55034 [HIGH] CWE-521 GHSA-wx4m-xq4x-6x7v: General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may
allow an attacker to execute a brute-f
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may
allow an attacker to execute a brute-force attack resulting in
unauthorized access and login.
CISA ICS
General Industrial Controls Lynx+ Gateway
cisa_ics·2025-11-13·CVSS 8.2
[HIGH] General Industrial Controls Lynx+ Gateway
ICS Advisory
##
General Industrial Controls Lynx+ Gateway
Release DateNovember 13, 2025
Alert CodeICSA-25-317-08
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.2
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: General Industrial Controls
- Equipment: Lynx+ Gateway
- Vulnerabilities: Weak Password Requirements, Missing Authentication for Critical Function, Cleartext Transmission of Sensitive Information
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could result in obtaining sensitive device information, unauthorized access, or create a denial-of-service condition.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
The following
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-11-15
Published