PT-2025-47028 · General Industrial Controls · Lynx+ Gateway

Abhishek Pandey · Published 2025-11-13 · Updated 2025-11-20 · CVE-2025-62765

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions General Industrial Controls Lynx+ Gateway (affected versions not specified)

Description The Lynx+ Gateway is susceptible to a cleartext transmission issue. This could allow an attacker to intercept network traffic and potentially gain access to sensitive data, including credentials transmitted in plaintext.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

BDU:2025-16291

CVE-2025-62765

Affected Products

Lynx+ Gateway

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-62765 · Security Note
• https://bdu.fstec.ru/vul/2025-16291 · Security Note
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-317-08.json · Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-317-08 · Note
• https://t.me/cveNotify/142895 · Telegram Post
• https://twitter.com/cracbot/status/1991461562255831220 · Twitter Post
• https://t.me/CVEtracker/37391 · Telegram Post
• https://twitter.com/CVEnew/status/1989478938918130101 · Twitter Post