CVE-2025-59780 in Lynx+ Gateway

Riassunto

di MITRE • 15/11/2025

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsabile: Icscert
• Prenotare: 06/11/2025
• Divulgazione: 15/11/2025
• Moderazione: accettato
• Voce: VDB-332551
• CPE: pronto
• CWE: CWE-306 (confermato)
• CVSS: 7.5 (CNA)
• EPSS: 0.00375
• KEV: no
• Attività: molto basso
• Settore: Insurance, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-59780
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-59780
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-59780/