CISA Warns of Critical Lynx+ Gateway Vulnerability Exposes Data in Cleartext
\n \t
\n
<\/BR>
\n
\n \t
\n
<\/BR><\/p>\n
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical warning about a severe vulnerability in Lynx+ Gateway devices that could expose sensitive information in clear text during transmission.<\/p>\n
The flaw allows attackers to catch network traffic and obtain plaintext credentials<\/a> and other confidential data. The vulnerability, tracked as CVE-2025-62765, stems from the product\u2019s failure to encrypt data during transmission.<\/p>\n This cleartext transmission vulnerability poses a significant security risk for organizations that rely on Lynx+ Gateway technology, particularly those managing critical infrastructure or handling sensitive communications.<\/p>\n An attacker with network access could exploit this weakness by monitoring traffic flowing through the affected gateway.<\/p>\n The lack of encryption means that credentials, authentication tokens<\/a>, and other sensitive information transmitted across the network remain visible to potential threat actors.<\/p>\n According to CISA, no authentication or user interaction is required to launch an attack, making this vulnerability particularly dangerous.<\/p>\n The vulnerability has received a CVSS v3 base score of 7.5, indicating a high-severity threat.<\/p>\nLynx+ Gateway Vulnerability<\/strong><\/h2>\n