CVE-2025-55034CWE-521

CVE-2025-55034

High · published November 15, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

⚡ A weak password requirement in the Lynx+ Gateway could be the key to a hacker's dream! 🗝️ Think of it like leaving the back door of your house unlocked with a sign that says ‘Welcome’—an open invitation for anyone to waltz in! 🏡 If an attacker executes a brute-force attack, they could gain unauthorized access to your system, allowing them to manipulate controls or data. This could lead to critical disruptions in industrial operations, potentially endangering both personnel and equipment.

Put simply

Think of it like leaving the back door of your house unlocked with a sign that says ‘Welcome’—an open invitation for anyone to waltz in! 🏡 This vulnerability arises from a lack of stringent password policies, making it possible for attackers to use brute-force methods to guess credentials and log in without restriction.

What to do

If an attacker executes a brute-force attack, they could gain unauthorized access to your system, allowing them to manipulate controls or data. This could lead to critical disruptions in industrial operations, potentially endangering both personnel and equipment. To mitigate this risk, enforce strong password policies that require complex passwords and implement account lockout mechanisms after a set number of failed login attempts. Regularly review login patterns for suspicious activity and consider enabling two-factor authentication for additional security. You've got this! Follow these steps to strengthen your defenses and keep your systems safe! 🛡️

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Weakness
CWE-521 · Weak Password Requirements
Published
2025-11-15T05:15Z
References (2)
EPSS history
Timeline
  • 14 NOV 23:22Z
    General Industrial Controls Lynx+ Gateway Weak Password Requirements
    cvelistv5