Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-4558

WormHole Tech GPM - Unverified Password Change

Description

The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WormHole Tech GPM

Default version status: unaffected

  • 0 to < 202502affected

References