high7.5Public exploit code
CVE-2024-25734
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wyrestorm Apollo VX20 < 1.3.58 - Account Enumeration2024-02-26 · remote · multiple
Impact
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wyrestorm | Apollo Vx20 Firmware | before 1.3.58 |