General Industrial Controls Lynx+ Gateway vulnerabilities

CVE-2025-58083 [CRITICAL] CWE-306 CVE-2025-58083: General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web s General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device.

CVE-2025-55034 [HIGH] CWE-521 CVE-2025-55034: General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.

CVE-2025-59780 [HIGH] CWE-306 CVE-2025-59780: General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web ser General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

CVE-2025-62765 [HIGH] CWE-319 CVE-2025-62765: General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability th General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to obtain sensitive information, including plaintext credentials.