CVE-2025-55034
High · 8.2CVSS
8.2
EPSS
0.3%
Published
Nov 15, 2025
CISA due date
—
The record
General Industrial Controls Lynx+ Gateway is vulnerable to a weak password requirement vulnerability, which may allow an attacker to execute a brute-force attack resulting in unauthorized access and login.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-85216 MISP contains an authentication bypass vulnerability in its LDAP and LinOTP… CWE-521
- CVE-2026-73778 A vulnerability exists in the Credential Manager component that may allow for… CWE-521
- CVE-2026-19293 SMP security request (from peripheral) does not include the maximum encryption key size… CWE-521
- CVE-2026-11493 A weakness has been identified in Tenda AC15 15.03.05.19. CWE-521
- CVE-2024-40684 IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0… CWE-521
- CVE-2026-9394 A vulnerability was determined in Besen BS20 EV Charging Station up to 20260426. CWE-521
- CVE-2026-41038 This vulnerability exists in Quantum Networks router due to lack of enforcement of strong… CWE-521
- CVE-2026-6284 An attacker with network access to the PLC is able to brute force discover passwords to… CWE-521