CVE-2025-55034— General Industrial Controls Lynx+ Gateway Weak Password Requirements
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-55034
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
General Industrial Controls Lynx+ Gateway Weak Password Requirements
Source: NVD (National Vulnerability Database)
Vulnerability Description
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
弱口令要求
Source: NVD (National Vulnerability Database)
Vulnerability Title
General Industrial Controls Lynx+ Gateway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
General Industrial Controls Lynx+ Gateway是印度General Industrial Controls公司的一款工业自动化网关。 General Industrial Controls Lynx+ Gateway存在安全漏洞，该漏洞源于密码要求弱，可能导致暴力破解攻击和未经授权的访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| General Industrial Controls | Lynx+ Gateway | Version R08 | - |
II. Public POCs for CVE-2025-55034
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-55034
请登录查看更多情报信息。
Same Patch Batch · General Industrial Controls · 2025-11-14 · 4 CVEs total
| CVE-2025-58083 | 10.0 CRITICAL | General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function |
| CVE-2025-59780 | 7.5 HIGH | General Industrial Controls Lynx+ Gateway Missing Authentication for Critical Function |
| CVE-2025-62765 | 7.5 HIGH | General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive Information |
IV. Related Vulnerabilities
Same weakness: CWE-521
- CVE-2026-41038
Weak Password Policy Vulnerability in Quantum Networks Route - CVE-2026-6284
Horner Automation Cscape and XL4, XL7 PLC Weak password requ - CVE-2026-33771
CTP OS: Configuring password requirements does not work whic - CVE-2026-34203
Nautobot: Management of users via REST API does not apply co - CVE-2025-55269
HCL Aftermarket DPC is affected by Weak Password Policy vuln
V. Comments for CVE-2025-55034
No comments yet