CVE-2024-25735

PoC —

CVSS 3.1

9.1 critical

EPSS

51%p99

Published

Mar 27, 2024 (Mar 27, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote attackers can discover cleartext passwords via a SoftAP /device/config GET request.

Vendors: wyrestorm
Products: apollo vx20 firmware
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (50.6%)

In the news0 stories

No ingested article mentions this CVE yet.