Wyrestorm vulnerabilities
We track 2 vulnerabilities in Wyrestorm products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2024.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest Wyrestorm vulnerabilities
- 9.1 Critical severity
apollo_vx20: Cleartext Transmission of Sensitive Information
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.
- 7.5 High severity
Apollo Vx20 Firmware: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.