critical9.1Public exploit code
CVE-2024-25735
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wyrestorm Apollo VX20 < 1.3.58 - Incorrect Access Control 'Credentials Disclosure'2024-02-26 · remote · multiple
Impact
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wyrestorm | Apollo Vx20 Firmware | before 1.3.58 |