CVE-2025-59780 in Lynx+ Gateway

Sumário

de MITRE • 15/11/2025

General Industrial Controls Lynx+ Gateway is missing critical authentication in the embedded web server which could allow an attacker to send GET requests to obtain sensitive device information.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Icscert
• Reservar: 06/11/2025
• Divulgação: 15/11/2025
• Moderação: aceite
• Entrada: VDB-332551
• CPE: pronto
• CWE: CWE-306 (confirmado)
• CVSS: 7.5 (CNA)
• EPSS: 0.00375
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication, Chemical, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-59780
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-59780
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-59780/