CVE-2025-55034 - CVE House
Back to Database
Status published High CVE-2025-55034

General Industrial Controls Lynx+ Gateway Weak Password Requirements

Vulnerability Description

General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-55034

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Abhishek Pandey from Payatu Security Consulting Pvt. Ltd. reported these vulnerabilities to CISA.

References

More from General Industrial Controls

View All →
CVE-2025-62765
General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information
High 8.7
CVE-2025-59780
General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function
High 8.7
CVE-2025-58083
General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function
Critical 9.2

Affected Vendor

General Industrial Controls

View all reports →

Affected Software

Lynx+ Gateway
Vulnerable Versions:
Version R08, Version V03, Version V05, Version V18

Timeline

Official Publish: November 14th, 2025
Last Modified: November 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-521

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.