Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-59780

General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

General Industrial Controls Lynx+ Gateway

Default version status: unaffected

  • Version R08affected
  • Version V03affected
  • Version V05affected
  • Version V18affected

References