Search vulnerabilities

Results 3

CVE-2024-25735

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.

CVSS 3.1 · 9.1 Critical EPSS 50.6% KEV · Not listed
Vendors
CVE-2024-25734

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.

CVSS 3.1 · 7.5 High EPSS 4.1% KEV · Not listed
Vendors