Riskcovery

CVE-2025-55034

General Industrial Controls Lynx+ Gateway Weak Password Requirements

State
Published
Severity
8.8 High
Published
Nov 14, 2025
Updated
Nov 17, 2025
Reserved
Nov 6, 2025

Read the record on cve.org

Description

General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.

Scores

CVSSScoreVectorSource
4.08.8 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:Nicscert
3.18.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:Nicscert

Weaknesses

Affected Products

ProductVersions
Lynx+ GatewayGeneral Industrial Controls
  • Version R08Affected
  • Version V03Affected
  • Version V05Affected
  • Version V18Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.