CVE-2025-3325

CVE-2025-3325 affects iteaj iboot 物联网网关 1.1.3, specifically the Admin Password Handler in the file near /core/admin/pwd. The root cause is manipulation of the ID argument that leads to improper access controls. This enables a remote attack, and the exploit has been publicly disclosed per the sour...

CVE-2025-3326

The CVE-2025-3326 entry affects the iteaj iboot 物联网网关 (version 1.1.3) with a vulnerability in the File Upload component, specifically the /common/upload path. The root cause is manipulation of the File argument that leads to cross-site scripting . The issue is remotely exploitable and has been pu...

CVE-2025-3327

CVE-2025-3327 affects the iteaj iboot 物联网网关, version 1.1.3. The issue occurs in the File Upload component, specifically processing the file at /common/upload/batch, where manipulating the File argument leads to a cross-site scripting (XSS) vulnerability. The attack is described as potentially rem...