Skip to content
CVE Tracker
Back

CVE-2012-4688

I-GEN opLYNX Central Authentication Bypass

High7.5EPSS 1.6%
Published
Updated
Reserved
Assigned by
icscert

Description

The Central application in i-GEN opLYNX before 2.01.9 allows remote attackers to bypass authentication via vectors involving the disabling of browser JavaScript support.

Scores

CVSS scores of CVE-2012-4688, by who scored it
Scored byCVSSScoreVector
icscertCNA (assigner)2.0High7.5AV:N/AC:L/Au:N/C:P/I:P/A:P
NVDNVD · Modified2.0High7.5AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (exploitation in 30 days)
1.6% · top 24% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

  • i-GEN Solutions Corporation · opLYNX

    • affected ≤ 2.01.8

What to do

Solution: i-GEN Solutions has released a new version, opLYNX 2.01.9, that resolves this vulnerability. The new version is installed during logon and automatically applied. Anthony Cicalla has tested the new version and validated that it resolves the vulnerability. To manually obtain the new version, ICS-CERT recommends customers contact i-GEN Solutions customer service.i-GEN’s customer service, http://www.i-gen.com , [email protected]

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .