CVE-2025-3325

Summary

CVE-2025-3325 is a recently disclosed vulnerability affecting iteaj iboot 物联网网关 version 1.1.3. This issue lies within the Admin Password Handler component and specifically in the /core/admin/pwd file. The vulnerability involves improper access controls, where manipulation of the argument ID can be exploited to gain unauthorized access. This vulnerability can be exploited remotely, increasing the risk to affected systems. The exploit for this vulnerability has been made public, making it a significant threat to organizations using the impacted version of iteaj iboot.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.