CVE-2025-3325

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in iteaj iboot 物联网网关 1.1.3. This affects an unknown part of the file /core/admin/pwd of the component Admin Password Handler. The manipulation of the argument ID leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-266 CWE-284 CWE-434

Affected software

Vendor	Product	Versions
iteaj	iboot 物联网网关	1.1.3

References

https://github.com/uglory-gll/javasec/blob/main/iboot.md#1logical-loopholesExploit
https://vuldb.com/?ctiid.303537Permissions Required, VDB Entry
https://vuldb.com/?id.303537Third Party Advisory, VDB Entry
https://vuldb.com/?submit.551869Third Party Advisory, VDB Entry
https://github.com/uglory-gll/javasec/blob/main/iboot.md#1logical-loopholesExploit

Timeline

Published: Apr 6, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-332507.8NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerabili CVE-2025-332517.8NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerabili CVE-2025-332527.8NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution. A successful exploit of this vulnerabili CVE-2025-332537.3NVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code execution by convincing a user to load a maliciousl CVE-2025-332547.5NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause internal state corruption. A successful exploit of this CVE-2025-332559.8NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization. A successfu CVE-2025-33263.5A vulnerability has been found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This vulnerability affects unknown code of the file CVE-2025-33276.1A vulnerability was found in iteaj iboot 物联网网关 1.1.3 and classified as problematic. This issue affects some unknown processing of the file /CVE-2025-33288.8A vulnerability was found in Tenda AC1206 15.03.06.23. It has been classified as critical. Affected is the function form_fast_setting_wifi_s CVE-2025-33293.1A vulnerability classified as problematic has been found in Consumer Comanda Mobile up to 14.9.3.2/15.0.0.8. This affects an unknown part of CVE-2025-33309.8A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. This vulnerability affects unknown CVE-2025-33319.8A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. This issue affect