Apollo Vx20 Firmware vulnerabilities

2 known vulnerabilities in Apollo Vx20 Firmware from Wyrestorm. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  apollo_vx20: Cleartext Transmission of Sensitive Information

  CVE-2024-25735Mar 27, 2024WyrestormEPSS 50.6%

  An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.

• 7.5 High severity

  Apollo Vx20 Firmware: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2024-25734Mar 27, 2024WyrestormEPSS 4.05%

  An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. The TELNET service prompts for a password only after a valid username is entered, which might make it easier for remote attackers to enumerate user accounts.