Vulnerabilities (CVE)

Filtered by vendor Wyrestorm Subscribe
Filtered by product Apollo Vx20 Firmware
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-25734 1 Wyrestorm 2 Apollo Vx20, Apollo Vx20 Firmware 2025-05-28 N/A 7.5 HIGH
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.
CVE-2024-25735 1 Wyrestorm 2 Apollo Vx20, Apollo Vx20 Firmware 2025-05-28 N/A 9.1 CRITICAL
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.
CVE-2024-25736 1 Wyrestorm 2 Apollo Vx20, Apollo Vx20 Firmware 2025-05-28 N/A 7.5 HIGH
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can restart the device via a /device/reboot GET request.