Print - [Vulnerability Alert] Wormhole Technology GPM – Unverified Password Change - Office of Library and Information Services, Ming Chi University of Technology

[Vulnerability Alert] Wormhole Technology GPM – Unverified Password Change

publish date : 2025-05-20 update date : 2025-05-20

Source: Ministry of education information & communication security contingency platform


Publication Number	TACERT-ANA-2025051309055757	Publication Time	2025/05/13 09:19
Incident Type	ANA-Vulnerability Alert	Discovery Time	2025/05/13 09:19
Impact Level	Low
[Subject] [Vulnerability Alert] Wormhole Technology GPM – Unverified Password Change
[Content] Forwarded from TWCERTCC-200-202505-00000011 [Wormhole Technology GPM – Unverified Password Change] (CVE-2025-4558, CVSS: 9.8) A Unverified Password Change vulnerability exists in Wormhole Technology’s GPM. Remote unauthenticated attackers can exploit this flaw to modify any user's password and then log into the system using the newly set credentials. Information Sharing Level: WHITE (Information content can be publicly disclosed)
[Affected Platform] Versions prior to GPM 202502
[Recommended Actions] Please update to version 202502 or later.
[Reference] Wormhole Technology GPM – Unverified Password Change: https://www.twcert.org.tw/tw/cp-132-10114-10b4b-1.html

(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw

Organizer: Computer Center