← volver
CVE-2025-4558

WormHole Tech GPM - Unverified Password Change

CVSS 9.3 CRITICALEPSS 0.4%CWE-620
The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
WormHole Tech · GPM

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →