CVE-2025-4558 in GPM

الملخص

بحسب MITRE • 12/05/2025

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Twcert
• حجز: 12/05/2025
• إفشاء: 12/05/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-308309
• CPE: جاهز
• CWE: CWE-620 (مؤكد)
• CVSS: 9.8 (CNA)
• EPSS: 0.00474
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-4558
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-4558
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-4558/