Description (CNA)
The GPM from WormHole Tech has an Unverified Password Change vulnerability, allowing unauthenticated remote attackers to change any user's password and use the modified password to log into the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| WormHole Tech / GPM | affected 0 before 202502 |
CWE
CWE-620
References
- https://www.twcert.org.tw/tw/cp-132-10114-10b4b-1.html
- https://www.twcert.org.tw/en/cp-139-10115-f5f14-2.html
ADP enrichment
No English description supplied.
No references supplied.