CVE-2025-59780 in Lynx+ Gateway

요약

\~에 의해 MITRE • 2025. 11. 15.

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• 책임이 있는: Icscert
• 예약하다: 2025. 11. 06.
• 공개: 2025. 11. 15.
• 모더레이션: 수락
• 항목: VDB-332551
• CPE: 준비됨
• CWE: CWE-306 (확인됨)
• CVSS: 7.5 (CNA)
• EPSS: 0.00375
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Finance, Homeoffice, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-59780
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-59780
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-59780/