Riskcovery

CVE-2025-59780

General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

State
Published
Severity
8.7 High
Published
Nov 14, 2025
Updated
Nov 17, 2025
Reserved
Nov 6, 2025

Read the record on cve.org

Description

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

Scores

CVSSScoreVectorSource
4.08.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:Nicscert
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nicscert

Weaknesses

Affected Products

ProductVersions
Lynx+ GatewayGeneral Industrial Controls
  • Version R08Affected
  • Version V03Affected
  • Version V05Affected
  • Version V18Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.