Most recent entries from all

bdu:2025-16290

EUVD-2026-261000

fkie_cve-2025-59780

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

GHSA-mqgv-qm98-7w7m

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

ICSA-25-317-08 — General Industrial Controls Lynx+ Gateway

The affected product is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login. The affected product is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device. The affected product is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information. The affected product is vulnerable to a cleartext transmission vulnerability that could allow an attacker to observe network traffic to obtain sensitive information, including plaintext credentials.