Vulnerabilidades de General Industrial Controls
CVEs publicadas que afetam produtos de General Industrial Controls: 4 registro(s), com severidade, exploração e correções.
CVE-2025-58083
Crítica · 10.0
CWE-306 14/11/2025
General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function
General Industrial Controls Lynx+ Gateway
is missing critical authentication in the embedded web server which could allow an attacker to remotely reset the device.
CVE-2025-62765
Alta · 7.5
CWE-319 14/11/2025
General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information
General Industrial Controls Lynx+ Gateway is vulnerable to a cleartext transmission vulnerability that could allow
an attacker to observe network traffic to obtain sensitive information,
including plaintext credentials.
CVE-2025-59780
Alta · 7.5
CWE-306 14/11/2025
General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function
General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which
could allow an attacker to send GET requests to obtain sensitive device
information.
CVE-2025-55034
Alta · 8.2
CWE-521 14/11/2025
General Industrial Controls Lynx+ Gateway Weak Password Requirements
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may
allow an attacker to execute a brute-force attack resulting in
unauthorized access and login.