CVE-2025-55034

General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.

Score

CVSS 4.0 8.8 High

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-11-15

Last modified

2026-10-07

Weaknesses

CWE-521

Affected products

• Lynx Gateway (General Industrial Controls)

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-317-08
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-08.json