CVE-2025-4558

Publication date

2025-05-12 03:08:50

Family

twcert

State

PUBLISHED

Description

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any users password and use the modified password to log into the system.